SSL VPN - Secure Sockets Layer Virtual Private Network ======================================================== .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **What is SSL VPN?** SSL VPN stands for Secure Sockets Layer Virtual Private Network. It allows users to securely access a private network (like a company’s internal systems) over the internet using a standard web browser. It uses SSL/TLS encryption to protect data in transit. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **Why is SSL VPN important?** * **Secure Remote Access** – Enables employees to access internal resources from anywhere. * **Data Protection** – Encrypts data to prevent eavesdropping and tampering. * **No Special Software Needed** – Often works through a browser, reducing setup complexity. * **User Authentication** – Ensures only authorized users can access the network. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **How SSL VPN works (in simple steps):** * You open a browser and go to your company’s SSL VPN portal. * You log in with your credentials (and possibly 2FA). * The SSL VPN gateway authenticates you and establishes a secure tunnel. * You can now access internal apps, files, or systems as if you were on the company network. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **Where is SSL VPN used?** * **Remote Workforces** * **BYOD (Bring Your Own Device) Environments** * **Third-party Vendor Access** * **Secure Mobile Access** * **Disaster Recovery Scenarios** .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **Which OSI Layer does this protocol belong to?** SSL VPN operates at the **Application Layer (Layer 7)** because: * It uses HTTPS (SSL/TLS), which is an application-layer protocol. * It interacts directly with user applications (like browsers or remote desktops). * It handles user authentication, session management, and encryption at the application level. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow Topics in this section, * :ref:`Learnings in this section ` * :ref:`Terminology ` * :ref:`Version Info ` * :ref:`SSL VPN Version&RFC Details ` * :ref:`SSL VPN Basic Setup on Ubuntu using IPv4 ` * :ref:`SSL VPN Basic Setup on Ubuntu using IPv6 ` * :ref:`SSL VPN Protocol Packet Details ` * :ref:`SSL VPN Usecases ` * :ref:`SSL VPN Basic Features ` * :ref:`SSL VPN Feature : Encrypted Communication ` * :ref:`SSL VPN Feature : User Authentication ` * :ref:`SSL VPN Feature : Access Control ` * :ref:`SSL VPN Feature : Application-Level Access ` * :ref:`SSL VPN Feature : Web-Based Access ` * :ref:`SSL VPN Feature : Session Management ` * :ref:`SSL VPN Feature : Endpoint Security Checks ` * :ref:`SSL VPN Feature : Logging and Auditing ` * :ref:`SSL VPN Feature : Split Tunneling ` * :ref:`SSL VPN Feature : High Availability & Failover ` * :ref:`Reference links ` .. _SSL VPN_step1: .. tab-set:: .. tab-item:: Learnings in this section * In this section, you are going to learn .. _SSL VPN_step2: .. tab-set:: .. tab-item:: Terminology * Terminology .. _SSL VPN_step3: .. tab-set:: .. tab-item:: Version Info * Version Info .. _SSL VPN_step5: .. tab-set:: .. tab-item:: SSL VPN Version&RFC Details .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Version&RFC_Details.csv :widths: 10,10,10,30 :header-rows: 1 .. _SSL VPN_step20: .. tab-set:: .. tab-item:: SSL VPN Basic Setup on Ubuntu using IPv4 **Setup** .. _SSL VPN_step21: .. tab-set:: .. tab-item:: SSL VPN Basic Setup on Ubuntu using IPv6 **Setup** .. _SSL VPN_step6: .. tab-set:: .. tab-item:: SSL VPN Protocol Packet Details **SSL Handshake Packet** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_packetdetails1.csv :widths: 10,20,30,10 :header-rows: 1 **SSL VPN Authentication Packet** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_packetdetails2.csv :widths: 10,20,30,10 :header-rows: 1 **SSL VPN Data Packet** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_packetdetails3.csv :widths: 10,20,30,10 :header-rows: 1 .. _SSL VPN_step7: .. tab-set:: .. tab-item:: SSL VPN Usecases .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Use_Cases.csv :widths: 10,20,30 :header-rows: 1 .. _SSL VPN_step8: .. tab-set:: .. tab-item:: SSL VPN Basic Features .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Basic_Features.csv :widths: 10,10,30 :header-rows: 1 .. _SSL VPN_step9: .. tab-set:: .. tab-item:: SSL VPN Feature : Encrypted Communication **Encrypted Communication - Testcases** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Feature1_Encrypted_Communication_TestCases.csv :widths: 10,10,30,20 :header-rows: 1 .. _SSL VPN_step10: .. tab-set:: .. tab-item:: SSL VPN Feature : User Authentication **User Authentication - Testcases** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Feature2_User_Authentication_TestCases.csv :widths: 10,10,30,20 :header-rows: 1 .. _SSL VPN_step11: .. tab-set:: .. tab-item:: SSL VPN Feature : Access Control **Access Control - Testcases** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Feature3_Access_Control_TestCases.csv :widths: 10,10,30,20 :header-rows: 1 .. _SSL VPN_step12: .. tab-set:: .. tab-item:: SSL VPN Feature : Application-Level Access **Application-Level Access - Testcases** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Feature4_Application_Level_Access_TestCases.csv :widths: 10,10,30,20 :header-rows: 1 .. _SSL VPN_step13: .. tab-set:: .. tab-item:: SSL VPN Feature : Web-Based Access **Web-Based Access - Testcases** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Feature5_Web_Based_Access_TestCases.csv :widths: 10,10,30,20 :header-rows: 1 .. _SSL VPN_step14: .. tab-set:: .. tab-item:: SSL VPN Feature : Session Management **Session Management - Testcases** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Feature6_Session_Management_TestCases.csv :widths: 10,10,30,20 :header-rows: 1 .. _SSL VPN_step15: .. tab-set:: .. tab-item:: SSL VPN Feature : Endpoint Security Checks **Endpoint Security Checks - Testcases** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Feature7_Endpoint_Security_Checks_TestCases.csv :widths: 10,10,30,20 :header-rows: 1 .. _SSL VPN_step16: .. tab-set:: .. tab-item:: SSL VPN Feature : Logging and Auditing **Logging and Auditing - Testcases** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Feature8_Logging_and_Auditing_Test Cases.csv :widths: 10,10,30,20 :header-rows: 1 .. _SSL VPN_step17: .. tab-set:: .. tab-item:: SSL VPN Feature : Split Tunneling **Split Tunneling - Testcases** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Feature9_Split_Tunneling_TestCases.csv :widths: 10,10,30,20 :header-rows: 1 .. _SSL VPN_step18: .. tab-set:: .. tab-item:: SSL VPN Feature : High Availability & Failover **High Availability & Failover - Testcases** .. csv-table:: :file: ./SSL_VPN/SSL_VPN_Feature10_High_Availability&Failover_TestCases.csv :widths: 10,10,30,20 :header-rows: 1 .. _SSL VPN_step19: .. tab-set:: .. tab-item:: Reference links * Reference links