Novell iFOLDER 3.x, Administrator'S Manual

Page: 12 / 23

12 Novell iFolder 3.x Security Administrator Guide
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
2.2 Using SSL for Enterprise Server - iManager
Communications
By default, the Novell iFolder 3. x plug-in to iManager uses SSL for communications to the iFolder
enterprise server being managed. For most deployments, this setting should not be changed. If the
iManager server and the iFolder enterprise server are on the same computer, SSL is not required. For
HTTP connections, the password is passed in the clear.
For information, see “ Accessing the Novell iFolder 3 Plug-In for iManager ” in the Novell iFolder
3.x Administration Guide .
2.3 Using SSL for Enterprise Server - Client
Communications
By default, the iFolder enterprise server is configured to require SSL. All client communication to
the server is encrypted using the SSL protocol. For most deployments, this setting should not be
changed because iFolder uses HTTP BASIC for authentication, which means passwords are sent to
the server in the clear.
For information, see “ Configuring the Enterprise Server for SSL Communications with the iFolder
Client ” in the Novell iFolder 3.x Administration Guide .
If you disable SSL for server-client communications, you should use a VPN (virtual private
network) for communications over wireless networks and outside the firewall. For information, see
Section 4.3, “Securing Communications with a VPN If SSL Is Disabled,” on page 21 .
2.4 Using SSL for Enterprise Server - Web
Access Server Communications
By default, the iFolder enterprise server is configured to communicate with the iFolder Web Access
server via SSL. For most deployments, this setting should not be changed. If the Web Access server
co-exists on the same machine as the iFolder enterprise server, an administrator can reconfigure to
disable SSL, which increases the performance of local communications between the two servers.
For information, see “ Configuring the Web Access Server for SSL Communications with the
Enterprise Server ” in the Novell iFolder 3.x Administration Guide .
2.5 Using SSL for Web Access Server - Users’
Web Browser Communications
By default, the iFolder Web Access server is configured to require SSL. All Web-browser-based
communication to the Web Access server is encrypted using the SSL protocol. In most deployments,
this setting should not be changed because iFolder uses Forms-based authentication for browser
communications, which means passwords are sent to the server in the clear. For information, see
“
Configuring the Web Access Server for SSL Communications with Web Browsers ” in the Novell
iFolder 3.x Administration Guide .
If you disable SSL for server-client communications, you should use a VPN (virtual private
network) for communications over wireless networks and outside the firewall. For information, see
Section 4.3, “Securing Communications with a VPN If SSL Is Disabled,” on page 21 .