<html><body bgcolor="#FFFFFF"><div><br></div><div>Some do full ip access over ssl. Check out Aventail (now owned by Soncwall)<br><br>Sent from my iPhone</div><div><br>On Aug 26, 2010, at 7:24 PM, Jim Kinney <<a href="mailto:jim.kinney@gmail.com">jim.kinney@gmail.com</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div>I'm not sure. It _may_ do some IP stuff but the ones I've seen (been a while) were just file access or remote control things.<br><br>For a java app to be able to touch networking, that's already a big scary no-no in client security.<br>
<br><div class="gmail_quote">On Thu, Aug 26, 2010 at 7:15 PM, Chris Fowler <span dir="ltr"><<a href="mailto:cfowler@outpostsentinel.com"><a href="mailto:cfowler@outpostsentinel.com">cfowler@outpostsentinel.com</a></a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div class="im">On Thu, 2010-08-26 at 19:05 -0400, Jim Kinney wrote:<br>
> don't (and WON'T) use it as it's a feeble excuse for a vpn. It<br>
> basically uses a browser session to establish an SSL connection to the<br>
> home office. That usually loads a java app back to the kiosk client.<br>
> Sometimes these are VNC things and sometimes they are little more than<br>
> file managers. Most require some form of user authentication<br>
> (password) to activate the client code sent back to the browser.<br>
><br>
> As the article states, the basic insecurity of the system is the<br>
> client itself. Since you don't know what kind of code has been<br>
> installed (keystroke loggers in particular) the "protection" is only<br>
> as good as the system you are using.<br>
<br>
</div>So these do not provide ip connectivity? Maybe something similar in<br>
process as ssh port redirection?<br>
<div><div></div><div class="h5"><br>
<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org"><a href="mailto:Ale@ale.org">Ale@ale.org</a></a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank"><a href="http://mail.ale.org/mailman/listinfo/ale">http://mail.ale.org/mailman/listinfo/ale</a></a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank"><a href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a></a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>-- <br>James P. Kinney III<br>I would rather stumble along in freedom than walk effortlessly in chains.<br><br><br>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Ale mailing list</span><br><span><a href="mailto:Ale@ale.org">Ale@ale.org</a></span><br><span><a href="http://mail.ale.org/mailman/listinfo/ale">http://mail.ale.org/mailman/listinfo/ale</a></span><br><span>See JOBS, ANNOUNCE and SCHOOLS lists at</span><br><span><a href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a></span><br></div></blockquote></body></html>