Barracuda Networks SSL VPN, Руководство администратора

Страница: 48 / 124

48 Barracuda SSL VPN Administrator’s Guide
Network Places
Network Places are another vital tool defending against unwarranted access to the corporate network.
By configuring a Network Place in the Barracuda SSL VPN, this allows a user to securely access the
organization’s network without compromising the integrity of the network.
A Network Place is a versatile resource that provides remote users with a secure Web interface to the
corporate network. A remote user can browse network shares, rename, delete, retrieve and even
upload files just as if he or she was connected in the office connected to the network.
In particular Network Places enables remote users that have appropriate permissions to browse
Microsoft Windows file shares, SAMBA file systems configured on UNIX and even FTP or SFTP
file systems. In addition Network Places also provides support for Web Folders and the Windows
Explorer Drive Mapping feature
Web Folders
WebDAV (Web-based Distributed Authoring and Versioning) is a protocol that extends HTTP to
define how basic file functions such as Copy, Move, Delete and Create Folder are performed over the
Internet.
Web Folders is Microsoft's built-in support for WebDAV that is included with Internet Explorer 5. It
enables the management of files on a WebDAV server by using a familiar Windows Explorer
interface.
Using a WebDAV client as Web Folders, a remote user can access the organization’s network through
the standard Windows Explorer interface without actually needing to log into the Barracuda SSL
VPN.
When using Windows XP or later along with Internet Explorer, you can take advantage of Microsoft
Web Folders to access your file resources. Web Folders are a great tool for remote working and once
set up, accessing a share is simply a matter of clicking an icon and entering a Windows username and
password when prompted.
So any Web Folder configured must go through the Barracuda SSL VPN server else the share cannot
be seen by the client operating system.
For security the Barracuda SSL VPN only allows Web Folders to be mapped to existing Network
Places. If a network file system has not been configured through Network Places then the Web Folder
cannot be mapped to the desired location. This enforces the policy restrictions; if a user does not have
a policy which allows them to access a given network place then they will also be unable to map a
Web Folder to it.
Windows Explorer Drive Mapping
This feature adds the ability for a user to create a Network Place and assign it a drive letter when using
Microsoft Windows 2000 or later.
The effect of this is that once the Barracuda SSL VPN Agent is running, the drive becomes available
under the user's Windows Explorer and like any other drive listed in Windows Explorer this drive can
be accessed and any content accessible for the lifetime of the Agent.
NOTE: This feature currently only works on 32-bit clients, but will NOT work on Windows 7.