Securing endpoints in SSL VPNs - Network World

Skip Links

DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Security

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library.  Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Audio

Hacker writes Cisco rootkit; Microsoft launches online telescope. Listen now!

Network World 360

Wireless dangers at airports. Listen now!

Network World Panorama

Additional Resources

RSS

FEATURED WHITEPAPERS

Endpoint Security: Data Protection for IT, Freedom for Laptop Users Absolute Software

The movement towards laptop computers has fueled an unprecedented number of data breaches. For IT and Information Security, encryption and training has proven ineffective against careless users and insider threats. This paper discusses these limitations and explains how endpoint security allows remote deletion of sensitive data, tracking of computers outside the network and the physical recovery of missing computers. Learn how you can ensure mobile data protection regardless of end-user interference.

RSS

FEATURED REPORTS

Executive Guide: Storage Heats Up HP

Get the latest on storage technologies that allow IT professionals to better cope with new IT demands. Learn how storage technologies can help you successfully tackle e-Discover, regulatory compliance, green data center initiatives and the data explosion. Get all the details now.

RSS

FEATURED WEBCASTS

Learn how to Create a More Efficient Virtualized Data Center Novell

Find out how you can consolidate Windows workloads and create a more efficient virtualized data center in this informative webcast, "Reduce Complexity and Cost - Windows Server Consolidation with Virtualization." Six concise webcast modules are available for your viewing. Watch them all consecutively or only the topics that interest you. The modules cover performance, user case studies, enterprise-level support, managing windows workloads, setup and configuration and the future of virtualization. Learn more today. Register below to learn more and be entered to win an Archos 605 Portable Media Player.

IT Buyer's Guides

View All Buyer's Guides

Free Newsletters

Sign up and receive the latest news, reviews and trends on your favorite technology topics

Save The Date!
What They Are Saying

Microsoft is not telling folks the WWT will not run on millions of older PC's unless they go out and...- Anonymous

Join the Discussion

Securing endpoints in SSL VPNs

Bottom Line By Joel Snyder , Network World , 12/06/2004
Snyder
  • Social Web 
  • Email 
  • Feedback 
  • Close

As an avowed IPSec zealot, I generally recommend the technology for remote access. But the SSL VPN vendors have been building such great technology that there are now places where SSL-based remote access is clearly a better choice than IPSec. One of the best places for SSL VPNs is in the ad hoc environment - places where your employees want to connect but would have to use someone else's computer, such as in an Internet cafe or at their brother-in-law's barbecue.

Because SSL VPNs require only a browser, you can use them from anywhere. The problem is that sensitive information might come through the pipe, and having that data sit on the hard drive either as a saved document or in a browser cache is dangerous. To solve this, the first generation of SSL VPNs used tools such as cache cleaners and cookie crumblers to try to obliterate traces that might be left behind. Moving forward from that primitive start, the new trend is toward virtual desktops - helper applications that track new files and browser changes, and unwind everything when you disconnect.

Unfortunately, even virtual desktops are not perfect. A huge problem is platform support. For example, at that barbecue, if your brother-in-law has a Mac, you can't run a virtual desktop. Or if he doesn't have the right version of Java or isn't running ActiveX, you could be out in the cold.

The story Google search cache spawns SSL fear covers a more subtle problem: Applications that are running before the virtual desktop starts don't get unwound. Google Desktop Search watches files and Web pages, and maintains its own cache. If it's running when you start the virtual desktop, your documents could be cached, accessible to the next person to use the computer, without you realizing it.

SSL VPN vendors will scramble to find a quick solution to the Google Desktop Search problem, but the general issue remains: Techniques such as virtual desktop never will be 100% effective at preventing leaks. Even if your goal is only to help users practice good computer hygiene, the potential for inadvertent disclosure is significant.

1 | 2 |  Next >
Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.
First Name
Last Name
E-mail
Zip Code