WebVPN NAT-T

to my knowlegde, you can run webVPN in several senarioes. One being the SSL, other being you have SSL-VPN client that you need to install first. This is infact a VPN client, hence NAT Traversal should be in place. HTH Martin Bilgrav

Yes, there're actually 3 options on a WebVPN solution:

- Clientless, mainly for web browsing and file sharing at the most;

- Thin Client, where you get an applet downloaded to your box and the ability to forward arbitrary network connections over the encrypted SSL connection over port 443

- Tunnel Mode, aka SVC "SSL VPN Client", where you also download this app and get full tunnel capability, much like IPSEC.

I have access to equipment capable of handling the first two, so I know how they work in detail. The BIG question is the Tunnel Mode. Still being an SSL tunnel and not an IPSEC one, I wonder if everything gets tunneled over port TCP 443 or if it requires other ports to happen.

Has anybody tested or used SVC out there?

Aless Pereira ARP Labs

- Mart> > Upon reading Release Notes for Cisco VPN 3000 Series Concentrator,