The Billion BiGuard S series provides clientless, identity-based secure remote access to a protected internal network. Using the SSL VPN Portal environment, Billion’s BiGuard S series can provide users with secure remote access to their entire network, or to individual components such as file shares, web-servers, FTP servers, remote desktops, or even individual applications hosted on Microsoft Terminal Servers. These various methods of secure remote access are provided by the following components:

Network Extender Technology – Network Extender Technology can provide remote users with full access to their protected internal networks. The experience is virtually identical to that delivered by traditional IPSec VPN clients, but Network Extender does not require any manual client installation. Instead, the Network Extender client is automatically installed on the remote user’s PC which instantiates a virtual adapter for SSL-secure point-to-point access to permitted hosts and subnets on the internal network.

Transport Extender Technology – Transport Extender Technology is a feature that allows only specified protocol and IP address to be accessible with SSL encryption, which provides a more secure connection during transmission. Transport Extender Technology can be used in services with a static listen port such as a POP3 and SMTP servers.

Network Places – Network Places provides remote users with a secure web-interface to Microsoft File Shares using the CIFS (Common Internet File System) or SMB (Server Message Block) protocols. Using a web-interface similar in style to Microsoft’s familiar “Network Neighborhood” or “My Network Places”, Network Places allows users with appropriate permissions to browse network shares, delete, retrieve, and upload files.

Application Proxy – Application Proxy is the more finely granular components of a trusted network which can be accessed through the SSL-VPN. Network resources can be pre-defined by the administrator and assigned to users or groups such as proxies for the remote users, and BiGuard S series has an integrated client so all the applications will be shown as web-based, users do not need to install client software for each application.

Application Proxy offers the following remote access capabilities:

Terminal Service (RDP5) – Terminal Service(RDP5), is the current version of Microsoft’s Remote Desktop Protocol, and because of its richer set of capabilities (such as session sound and full-screen mode), is only available in an ActiveX client for use with browsers such as Internet Explorer 6.0.2800 and newer versions.

Virtual Network Computing (VNC) – Virtual Network Computing (VNC) was originally developed by AT&T, but is today widely available as open source. Any one of the many variants of VNC server available can be installed on almost any workstation or server for remote access. The VNC client to connect to those servers is delivered to remote users through the web-browser as a Java client.

File Transfer Protocol (FTP) – File Transfer Protocol (FTP). Proxy access to an FTP server on the internal network, or any other network segment that can be reached by the SSL VPN, including the Internet. The remote user communicates with the BiGuard S series via HTTPS and FTP allows users with appropriate permissions to upload, download or create folders just as an FTP client software does.

Telnet (Java) – A Java-based Telnet client delivered through the remote user’s web-browser. The remote user can access the IP address specified by administrator of any accessible Telnet server, the SSL VPN will make a connection to the server, and will then proxy the communication between the user over SSL and the server using native Telnet.

Secure Shell (SSH) – A Java-based SSH client delivered through the remote user’s web-browser. The remote user can access the IP address specified by administrator of any accessible SSH server, the SSL VPN will make a connection to the server, and will then proxy the communication between the user over SSL and the server using natively encrypted SSH.

Web (HTTP) – Web (HTTP) proxy access to an HTTP server on the internal network, or any other network segment that can be reached by the BiGuard S series, including the Internet. The remote user communicates with the BiGuard S series by HTTPS using a URL which is defined by administrator and then retrieved over HTTP by the BiGuard S series device, transformed as needed, and returned, encrypted, to the remote user. Web-application session authentication is supported, as are many popular web applications or web mail systems, including as Microsoft Outlook Web Access.
Secure Web (HTTPS) – Proxy access to an HTTPS server on the internal network, or any other network segment that can be reached by the BiGuard S series device, including the Internet. The remote user communicates with the BiGuard S series device by HTTPS using a URL which is defined by administrator and then retrieved over HTTPS by the BiGuard S series device, decrypted, transformed as needed, and returned, encrypted, to the remote user.

Web application session authentication is supported, as are many popular web applications, including as Microsoft Outlook Web Access.