SSL VPN
Remote access VPN carried over TLS, usually through a browser or a lightweight client.
Because it uses the same protocol as ordinary web traffic, it works from restrictive networks where IPsec would be blocked, which made it the default for remote workers.
The appliances providing it have been among the most exploited products of recent years. Keeping them patched and putting MFA in front of them are the two controls that matter most.
Where this comes up
SSL VPN sits inside our networks and infrastructure work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.
Related terms
VPN An encrypted tunnel that connects a remote user or site to a network as though they were locally attached. IPsec A protocol suite for encrypting and authenticating IP traffic, most often used for site-to-site VPN tunnels. Multi-factor authentication Requiring two or more different kinds of proof to sign in, so a stolen password alone is not enough. Patch management The ongoing process of finding, testing, and applying software updates across every system you run.