SSL VPN User s Guide for the Windows, Mac OS, Linux, and Unix Platforms Citrix Systems, Inc.

Transcription

1 Citrix NetScaler Application Switch SSL VPN User s Guide for the Windows, Mac OS, Linux, and Unix Platforms Citrix Systems, Inc.

2 CITRIX SYSTEMS, INC., ALL RIGHTS RESERVED. NO PART OF THIS DOCU- MENT MAY BE REPRODUCED OR TRANSMITTED IN ANY FORM OR BY ANY MEANS OR USED TO MAKE DERIVATIVE WORK (SUCH AS TRANSLATION, TRANSFORMA- TION, OR ADAPTATION) WITHOUT THE EXPRESS WRITTEN PERMISSION OF CITRIX SYSTEMS, INC. ALTHOUGH THE MATERIAL PRESENTED IN THIS DOCUMENT IS BELIEVED TO BE AC- CURATE, IT IS PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IM- PLIED. USERS MUST TAKE ALL RESPONSIBILITY FOR THE USE OR APPLICATION OF THE PRODUCT(S) DESCRIBED IN THIS MANUAL. CITRIX SYSTEMS, INC. OR ITS SUPPLIERS DO NOT ASSUME ANY LIABILITY THAT MAY OCCUR DUE TO THE USE OR APPLICATION OF THE PRODUCT(S) DESCRIBED IN THIS DOCUMENT. INFORMATION IN THIS DOCUMENT IS SUBJECT TO CHANGE WITH- OUT NOTICE. COMPANIES, NAMES, AND DATA USED IN EXAMPLES ARE FICTITIOUS UNLESS OTHERWISE NOTED. The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required to correct the interference at their own expense. Modifying the equipment without Citrix' written authorization may result in the equipment no longer complying with FCC requirements for Class A digital devices. In that event, your right to use the equipment may be limited by FCC regulations, and you may be required to correct any interference to radio or television communications at your own expense. You can determine whether your equipment is causing interference by turning it off. If the interference stops, it was probably caused by the NetScaler Request Switch 9000 Series equipment. If the NetScaler equipment causes interference, try to correct the interference by using one or more of the following measures: Move the NetScaler equipment to one side or the other of your equipment. Move the NetScaler equipment farther away from your equipment. Plug the NetScaler equipment into an outlet on a different circuit from your equipment. (Make sure the NetScaler equipment and your equipment are on circuits controlled by different circuit breakers or fuses.) Modifications to this product not authorized by Citrix Systems, Inc., could void the FCC approval and negate your authority to operate the product. BroadCom is a registered trademark of BroadCom Corporation. Fast Ramp, NetScaler, and NetScaler Request Switch are trademarks of Citrix Systems, Inc. Linux is a registered trademark of Linus

3 Torvalds. Internet Explorer, Microsoft, PowerPoint, Windows and Windows product names such as Windows NT are trademarks or registered trademarks of the Microsoft Corporation. NetScape is a registered trademark of Netscape Communications Corporation. Red Hat is a trademark of Red Hat, Inc. Sun and Sun Microsystems are registered trademarks of Sun Microsystems, Inc. Other brand and product names may be registered trademarks or trademarks of their respective holders. Software covered by the following third party copyrights may be included with this product and will also be subject to the software license agreement: Copyright 1998 Carnegie Mellon University. All rights reserved. Copyright David L. Mills 1993, Copyright 1992, 1993, 1994, 1997 Henry Spencer. Copyright Jean-loup Gailly and Mark Adler. Copyright 1999, 2000 by Jef Poskanzer. All rights reserved. Copyright Markus Friedl, Theo de Raadt, Niels Provos, Dug Song, Aaron Campbell, Damien Miller, Kevin Steves. All rights reserved. Copyright 1982, 1985, 1986, , 1993 Regents of the University of California. All rights reserved. Copyright 1995 Tatu Ylonen, Espoo, Finland. All rights reserved. Copyright UNIX System Laboratories, Inc. Copyright 2001 Mark R V Murray. Copyright Eric Young. Copyright 1995,1996,1997,1998. Lars Fenneberg. Copyright Livingston Enterprises, Inc. Copyright 1992, 1993, 1994, The Regents of the University of Michigan and Merit Network, Inc. Copyright , RSA Data Security, Inc. Created Copyright 1998 Juniper Networks, Inc. All rights reserved. Copyright 2001, 2002 Networks Associates Technology, Inc. All rights reserved. Copyright (c) 2002 Networks Associates Technology, Inc. Copyright The Open LDAP Foundation. All Rights Reserved. Copyright 1999 Andrzej Bialecki. All rights reserved. Copyright 2000 The Apache Software Foundation. All rights reserved. Copyright (C) Robert A. van Engelen, Genivia inc. All Rights Reserved. Copyright (c) University of Cambridge. All rights reserved. Copyright (c) David Greenman. Copyright (c) 2001 Jonathan Lemon. All rights reserved. Copyright (c) 1997, 1998, Bill Paul. All rights reserved. Copyright (c) Matt Thomas. All rights reserved. Copyright 2000 Jason L. Wright. Copyright 2000 Theo de Raadt. Copyright 2001 Patrik Lindergren. All rights reserved. Part No. VPN-UG-JV Last Updated: December 2005

4

5 Contents Chapter 1 - SSL VPN Overview SSL VPN : Architecture SSL VPN : Key Features Chapter 2 - Getting Started with SSL VPN System Requirements Starting a SSL VPN Session Using the SSL VPN Browser Plug-in Accessing Client/Server Applications Using Web-based Applications Accessing a Remote File System Accessing Internal Web Sites Using Portal Tools Terminating the SSL VPN Session Chapter 3 - Troubleshooting the SSL VPN Browser Plug-in Debugging the SSL VPN Browser Plug-in SSL VPN Session Error Codes SSL VPN User s Guide i

6 Contents ii SSL VPN User s Guide

7 Chapter 1 SSL VPN Overview The SSL VPN is a secure remote access solution that provides point-to-point communication between remote users, such as mobile employees, partners, or resellers, and a private enterprise network. It does so by creating a secure SSL-based tunnel between a standard Web browser and a system. This allows authorized remote users to gain access to critical business resources such as corporate intranets, shared file systems, native client/server applications, and terminal services. This chapter provides an overview of the SSL VPN features. The following topics are described in this chapter: SSL VPN : Architecture SSL VPN : Key Features 1.1 SSL VPN : Architecture When you log on to a Web site that is secured by the SSL VPN, the system instructs the browser to download the SSL VPN browser plug-in onto your computer. The plug-in is a Java applet that creates a secure channel of communication between your browser and the system, thus allowing you to remotely access those resources you are authorized to use. Before the plug-in is downloaded, you will be prompted to permit it to execute. The plug-in first initializes itself by fetching the intranet applications, it supports, from the system. The network administrator configures the system with these applications. Once initialized, the plug-in listens on preconfigured ports. When it receives a request from the client, it opens a server-side connection, authenticates that connection with the user's credentials, and then tunnels subsequent data packets between the client and the server across the connection. This is illustrated in the following figure. SSL VPN User s Guide 1-1

8 SSL VPN Overview Figure 1-1 SSL VPN browser plug-in architecture The following section provides a step-by-step description of the preceding diagram. 1. The client application looks up the Hosts file for the address of the server. 2. The Hosts file points to localhost. The plug-in listens for requests, from the client application, on preconfigured ports. 3. The client application sends a request to the plug-in. 4. The plug-in forwards the request to the SSL VPN gateway. 5. The SSL VPN gateway forwards the request to the Application server. 6. The Application server responds to the SSL VPN gateway. 7. The SSL VPN gateway replies to the plug-in. 8. The plug-in replies to the client application. 1.2 SSL VPN : Key Features The SSL VPN supports: SSL 3.0 and TLS bit encryption Most TCP-based applications Windows, Linux, and Mac OSX 1-2 SSL VPN User s Guide

9 Chapter 2 Getting Started with SSL VPN The preceding chapter covered the architectural details of the SSL VPN browser plug-in. In this chapter, you will learn to use the plug-in. This chapter begins with a brief introduction to the system requirements for the plug-in. This is followed by detailed instructions on downloading and running the plug-in. The final section covers the various controls of the user interface. The following topics are described in this chapter: System Requirements Starting a SSL VPN Session Using the SSL VPN Browser Plug-in 2.1 System Requirements The minimum system requirements are: Windows Platform Web browsers: Internet Explorer 5.0+, Netscape 7.1, Mozilla 1.2+ Java Plug-in: JRE1.3.1 or greater Macintosh (MacOSX) Web browsers: Safari v1.2(v125) Java Plug-in: JRE1.4.2 Linux Platform Web browsers: Mozilla Java Plug-in: JRE1.3.1 or greater Note You can download the Java Runtime Environment (JRE) from Sun Microsystem s Java website if needed. Browse to to find the JRE for your operating system. 2.2 Starting a SSL VPN Session As mentioned earlier, the SSL VPN has been designed to provide remote users access to authorized resources on a private network, over a secure connection. SSL VPN User s Guide 2-1

10 To establish a secure connection, you must first log on to the SSL VPN Web site. Contact your system administrator for the URL to this Web site, and the login credentials. The typical format for such a URL is as follows: To log on to your company s SSL VPN Web site 1. Open a Web browser and enter the URL of the SSL VPN Web site. If your administrator has not configured a proper SSL certificate that identifies the server, the operating system will prompt you with a Security Alert window asking your permission to access the SSL VPN login window. Figure 2-1 Security Alert window The security alert indicates that there might be discrepancies in the certificate. For example: the certificate has expired. the domain name in the certificate does not match the domain name of the server. the certificate is not trusted. Click the Cancel button and contact the system administrator. 2. The SSL VPN login page is displayed. 2-2 SSL VPN User s Guide

11 Figure 2-2 SSL VPN login page 3. Enter your Login name and Password. 4. Click Go. When you log on to the SSL VPN for the first time, a security warning is displayed as shown in the following figure. This warning prompts you to download the SSL VPN browser plug-in. SSL VPN User s Guide 2-3

12 Figure 2-3 Security warning Note The appearance of these dialog boxes may differ across platforms and browsers. 5. Click the Grant this session or Grant always button. It is recommended that you click the Grant always button. The Proxy Configuration alert is displayed. Figure 2-4 Proxy Configuration alert Note This alert will not be displayed when you use Internet Explorer on Windows. For details on configuring the proxy settings of your Web browser, refer to the section of this chapter. 6. Click the OK button. The Secure Remote Access Session window and the services page are loaded as shown. 2-4 SSL VPN User s Guide

13 Figure 2-5 Secure Remote Access Session window and services page Note The Secure Remote Access Session window may take a few seconds to appear. If your computer using Netscape Navigator was was unable to fully load the smaller secure remote session window shown in the figure above, Netscape Navigator may not have been installed with Sun Java 2 support. You may need to rerun the Netscape Navigator installer, ensuring that Sun Java 2 support is selected. Note Update the proxy settings of the your Web browser to the values displayed on the Proxy Configuration alert or the Secure Remote Access Session window. This will enable you to access Web-based applications. 2.3 Using the SSL VPN Browser Plug-in The Secure Remote Access Session window is the graphical user interface to the browser plug-in. It allows you to securely access intranet portals, corporate applications, file systems, or mail on a private network. Closing the SSL VPN Session window will end the session. As a result, you will be disconnected from the private network. SSL VPN User s Guide 2-5

14 Figure 2-6 Secure Remote Access Session window The components of the Secure Remote Access Session window are described as follows: Proxy: The IP address and port number that the Web browser s proxy that enables Web access. Bytes sent: The quantity of data sent through the plug-in from the client to the server. Bytes received: The quantity of data received through the plug-in from the server to the client. Applications: Click this button to view the list of intranet applications configured on the system. Services: Click this button to view the services page. This page provides links to commonly accessed Web sites on the corporate network. File Transfer: Click this button to download/upload files, from the network, via the Web-based interface. Logout: Click this button to log off from the SSL VPN session. The message displayed on the Secure Remote Access Session window, indicates that the SSL VPN session will be terminated if you close the window. To gracefully terminate the session, click the Logout button. Otherwise, changes to the Hosts file on the client computer and the proxy settings will not be rolled back. The following sections cover the various tasks that you can perform with the plug-in Accessing Client/Server Applications As a remote user, you are authorized to access and use a limited set of client/ server applications on your company s intranet. The administrator configures these client/server applications on the system. To view these applications, 2-6 SSL VPN User s Guide

15 click the Applications button on the Secure Remote Access Session window. The Intranet Applications window, listing all the applications, is displayed. Figure 2-7 Intranet Applications window During a SSL VPN session, you will access these applications via the plug-in. There are two methods for doing so. The methods are: Hosts File Modification Method SourceIP and SourcePort Method These methods are explained in the following sections Hosts File Modification Method In this method, the plug-in adds an entry, corresponding to the applications configured by the VPN administrator, in the Hosts file. Note however that you must be logged in with root or administrative privileges in order for the plug-in to be able to modify this file. If you are not logged in to the system with the adequate privileges, you will need to manually edit the file yourself, adding the appropriate entries to the Hosts file as discussed in the following section. Consider a scenario where you need to open a Telnet session to a remote system from your laptop. You use the laptop to work both within your company s intranet and remotely. To ensure connectivity to the remote system from both within and outside your company s intranet 1. Add an entry telnet1 in the Hosts file on your computer. This entry consists of the IP address of the remote system and it s host name. SSL VPN User s Guide 2-7

16 Note On a computer that hosts the Windows platform, the Hosts file is located at %SYSTEMROOT%\system32\drivers\etc. On a computer that hosts the Mac and Linux operating systems, this file is located at /etc/hosts. To access the remote system from within your company s intranet 1. Initiate a Telnet session. 2. Type Open telnet1. The login prompt of the remote system is displayed. To access the remote system outside your company s intranet 1. Log on to the SSL VPN Web site. 2. Initiate a Telnet session. 3. Type Open telnet1. The login prompt of the remote system is displayed SourceIP and SourcePort Method If you do not possess administrative rights on your computer, the plug-in will not update the Hosts file. As a result, you need to manually configure the client/server applications using the source IP address and port values indicated on the Intranet Applications window. Within your company's intranet, use the destination IP address and destination port values corresponding to the application to be accessed. When using SSL VPN to access an application, use the source IP address and port values. These values are highlighted in the following figure. Figure 2-8 Details of the telnet1 application in the Intranet Applications window Consider the example in the previous section. To access the remote system from within your company s intranet 1. Initiate a Telnet session. 2-8 SSL VPN User s Guide

17 2. Type Open The login prompt of the remote system is displayed. Note is the DestIP value corresponding to telnet1. To access the remote system 1. Log on to the SSL VPN Web site. 2. Initiate a Telnet session. 3. Type Open The login prompt of the remote system is displayed. Note is the SourceIP value corresponding to telnet Using Web-based Applications The SSL VPN solution follows the Forward Proxy model to access intranet portals. All Web-based traffic is tunneled through the plug-in. When Internet Explorer is used to access the SSL VPN login page, the plug-in changes the proxy settings to reflect the proxy server indicated on the Secure Remote Access Session window. These changes are rolled back when the user logs off. This behavior is restricted to Internet Explorer on Windows. Other browsers need to be configured manually Using SSL VPN on Netscape and Mozilla You need to manually configure the proxy server settings of Netscape and Mozilla. The following procedure lists the steps to do so. To configure the proxy settings on Netscape and Mozilla 1. Select the Preferences option from the Edit menu. The Preferences window is displayed. SSL VPN User s Guide 2-9

18 Figure 2-9 Preferences window 2. Expand the Advanced option in the Category pane and select the Proxies option. The Proxies pane is displayed. Figure 2-10 Proxies pane 3. Select the Manual proxy configuration option SSL VPN User s Guide

19 4. Enter the IP and port address, displayed on the Secure Remote Access Session Window, in the HTTP Proxy and SSL Proxy fields respectively. 5. Click OK to save the changes Using SSL VPN on Safari When accessing the SSL VPN from the Mac OS X Safari web browser, the appropriate proxy settings are automatically configured for the session by the plug-in. No proxy configuration is necessary by the user Accessing a Remote File System To access the remote file system, click the File Transfer button on the Secure Remote Access Session window. The SSL VPN: Remote Secure File System Access page is displayed. This page allows you to log on to the intranet and access shared resources. The following figure illustrates the various components of this page. Figure 2-11 Remote Secure File System Access page. The following sections cover the various components of the SSL VPN: Remote Secure File System Access page. SSL VPN User s Guide 2-11

20 Top Panel The top panel of the SSL VPN: Remote Secure File System Access page displays the buttons, which allow you to perform various tasks, pertaining to the storage and transfer of files. Click this button to log on to the corporate network or a specific computer on that network. Click this button to navigate to the preceding folder in the folder tree. Click this button to refresh the contents of the active folder. Click this button to create a subfolder within the folder that is selected. Click this button to download the file from the remote server. Click this button to upload the file from the local client computer to a folder in the remote file server. Click this button to delete the file from the remote server. Click this button to change the name of a file or folder, which is selected. Click this button to disconnect from the remote server Left Panel The servers, their directories, and the directory structure are displayed in a tree format in the left panel as shown in the following figure. Click the + icon to view a subfolder SSL VPN User s Guide

21 Figure 2-12 Left panel Right Panel The right panel displays the Login Server window. Use this window to log on to the file system on the intranet or an appropriate file server. To access the file system, leave the Login Server field blank or click the Network Neighborhood link in the left panel. Note If you are not using Internet Explorer on Windows, ensure that you have modified the proxy settings of your Web browser. For details, refer to the section Using Web-based Applications, of this chapter. To log on to a file server 1. Enter the IP address or the name of the server in the Address field. Note If you leave this field blank, you will be logged on to the file system on the intranet. Alternately, if you type \\servername\c$, you can access the hidden shared folders on the server. 2. Enter your Login ID in the Login field. SSL VPN User s Guide 2-13

22 3. Enter your password in the Password field. If you do not have a password, leave the field blank. 4. Enter a valid domain name. If you have not been assigned a domain, leave the field blank. The right panel now displays the subfolders and files as shown in the following figure. The location of the active folder is displayed in the Address field. Figure 2-13 Right panel To download a file from a remote server 1. Select the file. 2. Click the Download icon. The File Download window is displayed SSL VPN User s Guide

23 Figure 2-14 File Download window 3. Click the Save button. The Save As dialog box is displayed as shown in the following figure. Figure 2-15 Save As dialog box 4. Navigate to the appropriate folder, and click the Save button to save the file. To upload a file to the remote server 1. Select the file in the local machine. SSL VPN User s Guide 2-15

24 2. Click to upload the file to the remote server. To remove a folder, a subfolder, or a file 1. Select the file, folder, or subfolder. 2. Click the Delete icon. The file is deleted from the local file system. Note A parent folder that contains subfolders cannot be removed. To delete a parent folder with subfolders, you need to delete the subfolders first and then delete the parent folder Accessing Internal Web Sites Most corporations host internal Web sites for sharing information. You can use the plug-in to access Web sites that are hosted on your intranet. To view these Web sites, click the Services button on the Secure Remote Access Session window. The Portal page is displayed below. The Portal page is created based on the data configured by the administrator. This page lists the most commonly accessed intranet Web sites. The administrator needs to configure this page manually SSL VPN User s Guide

25 Figure 2-16 Portal page Using Portal Tools The Portal page has several built in tools to assist you in using the SSL VPN. These tools include a ping interface for checking the accessibility of network hosts, tips, the SSL VPN User s guide, the SSL VPN file transfer utility and the SSL VPN themes utility. These tools have been placed under the home, file transfer and themes tabs on the SSL VPN portal page Home The tools under this tab help you navigate your way through the SSL VPN. This page can be customised by the SSL VPN adminstrator by providing themes that VPN users can apply for themselves. The individual tools are described below SSL VPN User s Guide 2-17

26 The Ping Tool The ping tool is used to check the accessibility of other computers on your intranet and on the Internet. This feature can help you troubleshoot connectivity issues if any, with your SSL VPN session in addition to determining availibility of a server hosting a resource on the network. Enter the IP address or hostname of the computer you which to ping and click the Ping button. The result of the ping query will be displayed immediately below the entry box. Figure 2-17 The Ping Tool The Tip and Help Tools The Tip tool offers helpful hints on using the SSL VPN and its various features. The Help tool is used to access the SSL VPN User s Guide. The User s Guide includes not only instructions on using the SSL VPN but also lists error code explanations and provides other troubleshooting assistance. The Bookmarks tool The SSL VPN Portal allows you to create your own set of links to commonly accessed resources. These bookmarks may be links to either intranet or Internet web sites or network accessible file systems on the intranet. Create a bookmark To create these bookmarks, click on the add links on the right side of the page. Figure 9 below shows the new page. In the Name field, enter the label to be used for your new link. In the Address Field enter either the uniform resource locator (URL) of the website or the network path to the fileserver. In the Description field, enter a short description for the created link. Once done, select the Add button to apply the new link or Cancel to exit the window without making any changes. Note A link to a website should contain the protocol specifier for example for web pages, for secure sites etc SSL VPN User s Guide

27 Figure 2-18 Add Bookmark Page The bookmark added here will be listed under the personal bookmarks on the SSL VPN home page as shown below. SSL VPN User s Guide 2-19

28 Figure 2-19 Personal bookmark Note The system automatically differentiates between website addresses (URLs) and network file system paths based on the format in which they are entered. Hence you do not need to specify which type of resource your link is for when you create it. Remove a bookmark To remove a personal bookmark, click on the remove button on the right side of the page. The Remove Bookmark page is displayed as shown in the figure. Select the bookmark you want to remove and click on the Remove button to confirm removal or click on the Cancel button to exit the window without making any changes SSL VPN User s Guide

29 Figure 2-20 Remove bookmark page Note You can remove only bookmarks listed under the Personal column and not those under the configured column File transfer For details, refer to the Accessing a Remote File System section Themes You can select themes that have been made available by the SSL VPN administrator for use with your SSL VPN session. The theme selected will be applied across all pages on the SSL VPN portal. If there are no themes configured by the VPN administrator then, on the Themes tab of the portal page, an error message is displayed as shown in the figure below. SSL VPN User s Guide 2-21

30 Figure 2-21 No themes configured Selecting a theme for the SSL VPN session Under the Themes tab on the SSL VPN portal, you can see the themes that the VPN administrator has made available for use. Click on the Select button next to the theme name for the theme to be applied for your current VPN session and all further VPN sessions SSL VPN User s Guide

31 Figure 2-22 Themes for the SSL VPN Portal Customizing your theme You can click on the customise button next to the theme name and change individual parameters used in the theme. The changes made are stored in a theme called Current Custom Theme and applied to the current theme. SSL VPN User s Guide 2-23

32 Figure 2-23 Customize your theme. Select the colors you want for each item on the SSL VPN portal page, the font stye and size and then click the Save Preferences button. The customized theme will now replace the old theme on the portal page. Note You can restore the default theme for the portal page by clicking on the Reset to site defaults button on the Themes tab Terminating the SSL VPN Session To log off from the SSL VPN session, click the Logout button. Note If you close the Secure Remote Access Session window (by clicking the Close button or by pressing Alt+F4), the changes to the Hosts file on the client computer and the proxy settings will not be rolled back SSL VPN User s Guide

33 Chapter 3 Troubleshooting the SSL VPN Browser Plug-in This chapter covers the troubleshooting of the SSL VPN browser plug-in. The following topics are described in this chapter: Debugging the SSL VPN Browser Plug-in SSL VPN Session Error Codes 3.1 Debugging the SSL VPN Browser Plug-in By default, the plug-in maintains a log of all of its activities in a separate ASCII file. This ASCII file, also known as a log file, is stored in the file system by the name mpsslvpn. On a computer that runs the Windows operating system, this file is stored in the root directory. For example, if the operating system resides on a partition labeled C of the hard disc, the log file is generated in the root (C:\)of this partition. On Mac OSX and Linux, the log file is generated in the /tmp directory. 3.2 SSL VPN Session Error Codes The following table lists the error codes displayed by the SSL VPN session. It also provides a description of these error codes. Table 3-1 Specific error codes displayed by the SSL VPN session Message Explanation Action Hosts file update failed. This message indicates that the plug-in has been unable to update the Hosts file on the client computer. Log on to the computer as an administrator. This will ensure that the Hosts file is updated. Alternately, follow the procedure outlined in the section SourceIP and SourcePort Method in chapter 2 of this guide. SSL VPN User s Guide 3-1

34 Troubleshooting the SSL VPN Browser Plug-in 3-2 SSL VPN User s Guide