采用了NAP和NAC的核心思想,设计了SSLVPN客户端安全状态检测系统,用于确保SSLVPN客户端的安全性.检测系统通过对客户端的防火墙、反病毒软件和系统补丁的检测来保护其不受病毒、恶意代码的侵害和黑客的攻击.在SSLVPN服务器设计了访问控制系统用于控制不同客户端的接入请求,控制的依据是VPN客户端安全状态检测的结果,对客户端访问控制进一步增强了SSLVPN系统的安全性能.
On the basis of NAP's and NAC's kernel philosophy, a security detecting system on the client sides of SSL VPN was designed to guarantee user's security. The detection system protects the client from the hostile infringement of virus, malevolent code and being attacked by hacker through the detection to firewall, anti-virus software, OS patch in VPN client. An access control system was designed in SSL VPN server to control the access requests of different VPN clients. It is based on the result of client security state. The access control to requests of SSL VPN clients further enhances SSL VPN system security performance.