Kerio Tech KERIO WINROUTE FIREWALL 6, Administrator'S Manual

Page: 336 / 368

Chapter 24 Kerio Clientless SSL-VPN (Windows)
336
SSL-VPN interface configuration
The SSL-VPN interface can be enabled/disabled on the Web Interface
→
SSL-VPN in the Config-
uration
→
Advanced Options section.
Figure 24.1 Configuration of the SSL-VPN interface
Through the Advanced button, you can get to configuration of a port and SSL certificate for
the SSL-VPN interface.
Figure 24.2 Setting of TCP port and SSL certificate for SSL-VPN
SSL-VPN’s default port is port
443
(standard port of the HTTPS service).
Click Change SSL Certificate to create a new certificate for the SSL-VPN service or to import
a certificate issued by a trustworthy certification authority. When created, the certificate is
saved as
sslvpn.crt
and the corresponding private key as
sslvpn.key
. The process of cre-
ating/importing a certificate is identical as the one for WinRoute’s interface or the VPN server,
addressed in detail in chapter 11.1 .
Hint
Certificates for particular server name issued by a trustworthy certification authority can also
be used for the Web interface and the VPN server it is not necessary to use three different
certificates.