Design And Implementation Of The Ssl Vpn Gateway Product

With the great development of Internet and electronic business and the ever-increasing range of commercial activities, enterprise and it's branches ask strongly for the realization of inter-connect, and even for the openness of some resources on it's LAN (Local Area Network) to the associates and equipment providers. This new commercial mode in turn activates the techniques of VPN (Virtual Private Network).VPN is used to form an exclusive logical link on the public network, which helps to build up a reliable and secure internet connection between the enterprise and the remote users, the branches and the equipment providers, ensures the secure transportation of data, and, in turn, expand the intranet of the enterprise. As a networks ecurity protocol, IPSec is a safe, efficient one. However, it gives litle control to the secure access to meet the requirements of all kinds of applications. In contrast, SSL VPN is not so expensive and easy to implement. Its'system of control over the secure access is much better, and moreover, its'performance on the remote access is extraordinary, so it is becoming the most popular method for remote access. SSL (Secure Socket Layer) is a protocol used to make data transmitting secure, and has already been an industry standard; The combination of SSL and VPN—SSL VPN (Secure Socket Layer Virtual Private Network) is now a hot point in remote access market.I worked as an intern for one year in Beijing Topsec Network Security Technology Co., Ltd, which is a famous network security company in China. I took part in the development of SSL VPN gateway product during the year and the product has been in the market. My job is to develop and maintain the ACL (Access Control List) module, and help others to develop other modules and fix bugs. The paper is based on the work during my intern experience and introduces the critical function modules of the system.