Sun Microsystems Portal Server 6 2005Q1, Руководство по планированию

Страница: 41 / 192

Netlet
Chapter 2 Portal Server Secure Remote Access Architecture 41
Gateway Logging
You can monitor the complete user behavior by enabling logging on the Gateway.
The Gateway uses the Access Manager logging API for creating logs.
Using Accelerators with the Gateway
You can configure accelerators, which are dedicated hardware co-processors, to
off-load the SSL functions from a server's CPU. Using accelerators frees the CPU to
perform other tasks and increases the processing speed for SSL transactions.
Netlet
Netlet can provide secure access to fixed port applications and some dynamic port
applications that are available on the intranet from outside the intranet. The client
can be behind a remote firewall and SSL proxy, or directly connected to the
Internet. All the secure connections made from outside the intranet to the intranet
applications through the Netlet are controlled by Netlet rules.
A Netlet applet running on the browser sets up an encrypted TCP/IP tunnel
between the remote client machine and intranet applications on the remote hosts.
Netlet listens to and accepts connections on preconfigured ports, and routes both
incoming and outgoing traffic between the client and the destination server. Both
incoming and outgoing traffic is encrypted using an encryption algorithm selected
by the user, or configured by the administrator. The Netlet rule contains the details
of all servers, ports, and encryption algorithms used in a connection.
Administrators create Netlet rules by using the Access Manager administration
console.
Static and Dynamic Port Applications
Static port applications run on known or static ports. Examples include IMAPand
POP servers, Telnet daemons, and jCIFS. For static port applications, the Netlet
rule includes the destination server port so that requests can be routed directly to
their destinations.