SSL VPNs to take over remote access

NEWS

Virtual private networks built on the Web's secure sockets layer (SSL) are tipped as the hottest way to give employees and business partners access to corporate applications. Aventail, one of the first in this field as a service-provider, has moved into hardware, to provide a specialised SSL VPN appliance. Virtual private networks use encryption to make a secure path across the Internet. Because SSL encryption is available in Web browsers, VPNs based on SSL can be used without special client software, even from kiosks and Internet cafés. SSL VPNs will be a big part of the overall VPN market, according to analysts. "The SSL VPN market will surge to $871m in 2005," said Jeff Wilson, executive director of analyst firm Infonetics Research. The total VPN market will be $4.8bn in that year, he believes. And VPNs are continuing to grow, even in the current downturn, with VPN and firewall revenue of $668m in the third quarter of 2002. "End-users all over the world are moving from a model of centralised Internet connectivity to distributed connectivity," said Wilson. VPNs were first used for employees working at home or in remote offices. They have been used more and more by mobile executives to access corporate applications where security is important, but the first VPN implementations required the user to carry a laptop, since client software was required to make the VPN link. Despite breaking this limitation, SSL VPNs were seen at first as more limited than those based on the IPSec encryption standard. The first implementations would only work with Web-based applications, or with client-server applications that had a front-end such as Citrix Metaframe. Aventail claims its EX-1500 appliance gets round these limitations. "This can actually replace IPSec VPNs, allowing users to move their IPSec equipment to encryption on permanent LAN-to-LAN links," said Jude O'Reilly, director of product marketing at Aventail. The company has provided SSL VPNs as a managed service called iPass for four years, and provides the service to around 400 corporations. Services so far have been based on bespoke racks of Sun hardware; the appliance makes this easier to set up and should open up a larger market. It also adds new functions, including a Java agent called Aventail OnDemand, which allows connections to more client-server applications, and a DIY corporate portal called ASAP Workplace. The portal is for users who do not yet have an intranet -- a Web-based internal company information service -- and allows them to build one quickly. "The product includes Web File Access, whereby users can find files on their office systems," said O'Reilly. "At the moment, people are mailing things to their Hotmail account if they want to work on them outside the office, and IT departments are turning a blind eye to the security risk." The product also has a management console, to handle user privileges easily, and managed versions of the product are available. Aventail joins a crowded market of SSL VPN appliances competing against products such as Netilla, which is distributed in the UK by Lansition, and Neoteris, whose IVE also uses SSL for remote access. "Our competitors have less experience," said O'Reilly. "We are on version 6 of the product. Many of the others are limited to Citrix -- we let you get access to Citrix but are not limited to that." "SSL VPNs will be the dominant method for remote access and extranet VPNs," said O'Reilly. "IPSec will focus on securing site-to-site VPNs." The product costs £18,000 for 50 concurrent users -- probably enough to support a population of 500 potential users, said O'Reilly -- and can be expanded up to 1,000 users. Aventail expects to sell it through channel partners and integrators in the security field, but has no names signed up in the UK at this point.

More enterprise IT news in ZDNet UK's Tech Update Channel.

For a weekly round-up of the enterprise IT news, sign up for the Tech Update newsletter. Have your say instantly, and see what others have said. Go to the ZDNet news forum. Let the editors know what you think in the Mailroom.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

ZDNet UK Live

"Interesting thought ... If you installed Win7 as a dual boot on a machine that previously only had Linux, and it wrecked your Linux installation,...

25 seconds ago by BugStalker on Windows 7 Declares War on GRUB

This is an excellent summary of Ubuntu and Mint and the interface differences between them. Most such articles take a very partisan position for...

4 minutes ago by whs001 on A tale of two distros: Ubuntu and Linux Mint

@ewallace. Not so clear. Anyone can obtain the text, for example from here http://www.ustr.gov/webfm_send/2379. I support ACTA so long as it and...

22 minutes ago by Moley on ACTA: Facts, misconceptions and questions

I think WinRT is fantastic. I just wish it was an option for people that didn't want to go through Microsoft's App Store with its attendant...

3 hours ago by 45283 on Why Windows 8 needs architectural hygiene for WOA

Nine people? £30m? Who's back pocket is that lot going in? And IF they say it is for new buildings, what about all the ones the government has...

5 hours ago by Burn-IT on Police set to launch three £30m e-crime hubs

Just to be clear, nobody knows what is in the text of ACTA, here is a photograph of the text of ACTA http://twitpic.com/8h9iju as submitted to the...

5 hours ago by ewallace on ACTA: Facts, misconceptions and questions

Unfortunately main issue is that ASUS is refusing to accept that they make some mistake on this version of asus Transformer prime. 1 - GPS sensor...

6 hours ago by fgvrg56 on Asus Eee Pad Transformer Prime Wi-Fi & GPS problems?

@Marcus A fair question. Just talked with Archos which said it was working on an announcement for next week....

7 hours ago by Ben Woods on Archos confirms G9 Ice Cream Sandwich update schedule

Any update on this, considering the claimed "first week of February"?

8 hours ago by Marcus Karlsson via Facebook on Archos confirms G9 Ice Cream Sandwich update schedule

Bill Goodrich : Just as al_langevin pointed out, with Windows Server 2008 there is no Services for Macintosh anymore. It's gone, not available....

16 hours ago by apexwm on Windows Server 2008 drops the ball for Mac compatibility

Replying to an old topic that I'm currently facing with my CEO (who is on a Mac). Our servers are primarily Windows Servers, office is about...

23 hours ago by txtrainguy on Windows Server 2008 drops the ball for Mac compatibility

Sure, that makes perfect sense. Pay wrong-doers money and thank them for breaching your security and pointing out your flaws, that would surely...

23 hours ago by k0tcs3 on US indicts Romanian over NASA climate change hack

I think he's referring specifically to Android apps, as Apple do regulate their App Store, but Google seem to let any old crap onto the Android store!

23 hours ago by Random_Error on RIM: BlackBerry will keep 'garbage' apps out of store