SSL VPN has been a key technology for mobile workforces for over a decade now, but as the market moves forward, will it continue to be? As new challenges of the modern workforce confront IT providers, SSL VPN technologies will need to make changes in order to stay relevant in the Mobile Era. How will SSL VPN change? What is the future of SSL VPN?
2. WHAT IS SSL VPN? SSL VPN has been a key technology for mobile workforces for over a
decade now, but as the market moves forward, will it continue to be?
As new challenges of the modern workforce confront IT providers,
SSL VPN technologies will need to make changes in order to stay
relevant in the Mobile Era. But first…
What is an SSL VPN?
Secure Sockets Layer (SSL) Virtual Private Networks (VPN) uses
encryption to securely extend a private network over a public one. In
layman’s terms, it allows you to safely access data from a place of
business without actually being there. Without an SSL VPN present,
people could read, intercept, or change the information you send back
and forth to a business server – putting not just your communications
at risk, but all of a company’s information.
The downfall of the traditional SSL VPN
The value of the traditional SSL VPN has recently declined due to
changes in the market. IT providers face 2 major challenges today
concerning remote users:
1. Unpredictable Networks
2. Mobile and BYOD Security
Sangfor Technologies
www.sangfor.net
Sangfor Technologies
www.sangfor.net
-2-
3. 2 MAJOR CHALLENGES OF SSL VPN
While traditional SSL VPNs tackle the security issues of a mobile
workforce, they do not address the issue of speed and quality of
service. By nature mobile users have unpredictable levels of
connectivity ranging from private Wi-Fi to 2G data networks. With
each network comes differing levels of bandwidth and latency,
creating a rocky and inconsistent user experience while on the go.
In order to embrace the future of labor, SSL VPN needs to include
or companion with technologies that can reduce the symptoms
of a poor internet connection.
How to handle unpredictable networks
The best way to handle unpredictable networks is to reduce the
amount of data an employee needs to send across a network.
Two major technologies have developed to do this:
WAN Optimization: Data across the WAN is reduced by using
caching, compression, application proxies, and protocol
optimization. WAN Optimization for mobile users is most often
an extra module for branch-to-branch WAN Optimization
products, which can have a sizeable capital expenditure to
deploy.
Application Virtualization: Instead of sending app data across
the network, only screen and keyboard updates are sent through
the WAN. The application window is pushed to the user while their
mouse and keyboard interactions are sent back to the server.
Both of these methods create a more consistent and pleasant
user experience by minimizing the connectivity needs of a
successful session.
UNPREDICTABLE NETWORKS
Sangfor Technologies
www.sangfor.net
www.sangfor.net
Sangfor Technologies
-3-
4. 2 MAJOR CHALLENGES OF SSL VPN
In the last few years both working from home and utilization of
remote workforces have increased dramatically. Availability of
information at an instant is now a standard requirement of work,
regardless of location or device.
SSL has done a great job enabling this movement, but there are
concerns due the variety of devices in use and the subsequent
information leaks. It is one thing to secure a tunnel to the remote
device, but what happens to the data once it is transferred to that
device?
How to maintain data security in the Mobile Era
Custom Mobile Apps: Many companies seek to handle this problem
by creating their own mobile app to interact with servers at their
HQ/datacenter. While a successful company-specific app can be
invaluable, creating an app has significant time and capital costs
regardless of the quality of the result. Often employees fail to
appreciate the cost and effort since they are used to a more
seamless experience using their applications on a PC.
Application and Desktop Virtualization: Other companies handle
the problem by remotely delivering applications or entire desktops.
Rather than send a whole data set to a device we can now just push
the application window or desktop and return the user’s commands.
This saves both on the bandwidth requirements and greatly enhances
the data security. Citrix’s XenApp is a good example of this methodology.
So what is the best way to handle a mobile workforce?
Users need a solution which is easy to operate on a day to day basis.
If they must follow a complex procedure to access their resources
then one of two things will happen; either they will become frustrated
and give up or they will try their own shortcut and compromise data
security. IT administrators need a solution that offers a smooth
process where support calls are minimized while the security
infrastructure is not compromised.
SECURITY FOR MOBILE
DEVICES AND BYOD
Sangfor Technologies
www.sangfor.net
www.sangfor.net
Sangfor Technologies
-4-
5. EASYCONNECT App Virtualization alone is not the answer
Application Virtualization is not a magic bullet. While it has the
greatest potential to relieve the problems with remote work in
the Mobile Era, it is too reliant on constant internet connectivity
to be a singular solution. There are still situations where an
employee needs to have access to data offline, so the traditional
SSL VPN cannot be removed entirely. This complicates remote
access because now IT providers will need to support two different
platforms across two different vendors.
This also creates frustration on behalf of the users. They are
required to use two different applications – one when they want
to run programs on a server (app virtualization) and another when
they need to retrieve a file to use locally (Traditional SSL VPN).
How can Sangfor help?
To ease the IT burden of maintaining two separate platforms and
vendors, Sangfor created EasyConnect – an App Virtualization
software with built-in SSL VPN and WAN Optimization technologies.
By leveraging Sangfor’s proven expertise in SSL and WAN
Optimization, we’ve built a remote access solution that is fast,
simple, and safe.
EasyConnect delivers the best possible performance to employees
while still adhering to the security concerns of management. Remote
users are happy because they have a consistent work experience
and access is as simple as a login and password. IT admins are happy
because they only need to manage and protect one IT environment,
learn one technology, and interact with one vendor.
We’re proud of EasyConnect and we’d love for you to try it out. If
you’re interested just download a free trial copy from Sangfor.net,
or reach out to us at the information below.
Any application
Any device
Anywhere
info@sangfor.net
www.sangfor.net
www.sangfor.net
Sangfor Technologies
-5-