Distribution SSL VPN system and construction method

Abstract

The invention discloses a distributed SSL VPN system architecture method including: installing a service end; installing a switching element device at different operation business positions and connecting to form an SSl VPN switching platform; installing an SSL VPN device at a client end, and distributing the only identification for the SSL VPN device; configuring a local area network interior IP address of the client end for the SSL VPN so as to enable to visit the Internet and login on the SSL VPN switching platform; the client end using graphical configuration guide to creat accounts and access control rights; entering the SSL VPN to use a work flow to finish the interactive transmission of the data. The invention overcomes the problem of hiring extra link for the SSL VPN by the network distributed architecture and the use method.

Description

technical field [0001] The invention relates to the field of computer software and information security, in particular to a distributed SSL VPN system and a framework method. Background technique [0002] In the Internet age, how to securely and reliably remotely access office internal network resources is a major issue for every company. At present, the SSL VPN (Secure Sockets Layer Virtual Private Network) operation mode is gradually popular in the market. The so-called SSL is the abbreviation of Secure Socket Layer Protocol, that is, the secure socket layer protocol. It is an encrypted transmission technology protocol. By specifying a symmetric key for the symmetric encryption technology, an encrypted channel is established, and the information passing through this channel is encrypted; the so-called VPN is Virtual Private Network English abbreviation, known as virtual private network or virtual private network, is a communication method commonly used to connect private ...

AI Technical Summary

Problems solved by technology

However, the sustainable development capability and scalability of this operation mode are poor. With the continuous increase of the number of users and the continuous popularization of SSL VPN products, due to the following reasons, it will soon enter a difficult situation of maintenance: in this In the mode, the operator needs to maintain all user accounts and access policies, and must face the vastly different and ever-changing organization / enterprise network when the service is opened; and it is inevitable to open the line connecting the IDC for the user, which involves The adjustment of the user's internal network and application system, the resulting engineering and maintenance are very complicated

Images