Aventail SSL VPN appliances: secure remote access made easy

Only Aventail Smart SSL VPNs are able to provide complete application access with full security, control of the end point, and unified policy management. Our easy-to-use, easy-to-control appliances increase productivity by providing employees and business partners with secure, clientless access to the resources they need from any device, anywhere, with the unmatched security of SSL VPN. For IT departments, our appliances deliver a lower total cost of ownership (TCO) by eliminating difficult IPSec VPN deployments and constant support calls.

Aventail WorkPlace

Aventail WorkPlace provides out-of-the-box clientless browser access to Web and client/server applications and file shares from Windows, Windows Mobile, Macintosh, and Linux unmanaged devices, including home computers, public machines, smart phones, and PDAs. Aventail Connect adds a Web-delivered thin client on the same broad range of platforms for managed devices for a complete "in-office" experience. In addition, Aventail Connect Service Edition delivers remote application-to-application access and Aventail Connect Mobile provides "in-office" access for Windows Mobile PDA users.

End Point Control

Deliver everywhere access, ensure maximum security
remote access enables more users to access your network from potentially risky end points and devices, including wireless hotspots and unmanaged PDAs. As a result, managing access by user identity alone is no longer enough. To effectively control access, ensure secure communications, and protect your data, you also need to focus on how secure a user's environment is.
With Aventail End Point Control (EPC), you get the precision you need to reduce risk. End Point Control is the ability to enforce policy based on the level of trust that IT has for the user as well as his or her environment. With EPC, IT organizations can establish and define different Policy Zones to fit their needs. Common Policy Zones include zones for untrusted machines such as kiosks, semi-trusted machines such as home PCs, and trusted corporate assets like laptops. IT can then manage those zones with a simple set of parameters.

Aventail Secure Desktop

Aventail Secure Desktop delivers the utmost data protection for unmanaged workstations—such as
airport kiosks or Internet café PCs. Aventail Secure Desktop incorporates and integrates technology
from Symantec™ (Sygate) to create best-of-breed security for your remote session —a “virtual” Windows session that runs on top of the actual desktop. A mobile user can browse the Internet, check e-mail, and work with personal files using client/ser ver applications, but once the session is over, all sensitive data is automatically and thoroughly removed from the unmanaged workstation.

Confidential data on unmanaged workstations puts your organization at risk.
Employees, business partners, and customers are demanding access to corporate files and
applications from any location—including home PCs and public kiosks. The problem is that
confidential information can be left behind on unmanaged workstations, such as:

• Downloaded files, records, or images
• Viewed e-mail attachments
• Browser cookies
• Bookmarked URLs
• History of Web pages visited
• Passwords cached on the hard drive
• Regulated financial, personal, or medical data

Aventail Cache Control: Beyond basic cache cleaning

• While other SSL VPNs provide basic cache cleaning, they may only delete the browser cache, only work if the user explicitly logs out, work only on Windows, and leave files in the Recycle Bin.
• Aventail Cache Control deletes Web session data, including browser cache, history, cookies, and passwords, and removes all protected data for the current session. Aventail Cache Control works on Windows, Macintosh, and Linux machines and protects data even if the user walks away from the PC or closes the browser window.

Policy Management

Defining a resource once, and then leveraging it with multiple rules.
Allowing users to reside in multiple groups with overlapping rules, if that's how the directory is structured.
Enabling different access privileges based on the security level of particular end-point devices.
Enabling groups of users to access applications based on time of day, cryptography strength, and the source network used for access