Remote access | Direct Application Access

The application client software installed on the telework client device initiates a connection with a server, which is typically located at the organization's perimeter (e.g., on a DMZ).

One of the most common examples of direct application access is web-based access to email, also known as webmail. The teleworker runs a web browser and connects to a web server that provides email access.

The web server runs HTTP over SSL (HTTPS) to protect the communications, and the webmail application on the server authenticates the teleworker before granting access to the teleworker's email. For cases such as webmail that use a ubiquitous application client (e.g., a web browser), direct application access provides a highly flexible remote access solution that can be used from nearly any client device.

The direct application access architecture is generally only acceptable if the servers being accessed by the teleworkers are located on the organization's network perimeter, and not internal networks.

Servers on the perimeter are directly accessible from the Internet, so they must be well-secured to reduce the likelihood of compromise.

Many organizations choose to provide direct application access to only a few lower-risk applications that are widely used, such as email, and use tunnel or portal methods to provide access to other applications, particularly those that would be at too much risk if they were directly accessible from the Internet.

Firewall plannings

Deploy and Manage Firewalls

Firewall Planning in Details

Firewalls Security | Policies Based on Applications

Firewall security and policies | IP Addresses and Characteristics

Architecture with Multiple Layers of Firewalls

Network Layouts with Firewalls

Firewalls - Dedicated Proxy Servers

Firewalls - Application Proxy Gateways

Firewalls security| Packet Filtering

IPv6

Firewalls and Network Architectures

Distributed Firewalling

Firewalls Developing and Testing

Why to choose a Firewall - VPN (Virtual PrivateNetwork) Solution ?