SSLVPN - Web Mode vs Tunnel Mode

[wcbenyip]

Hi All, Just want to check what service/port should be allowed if the sslvpn is running for web mode instead of tunnel mode? The case is, we want to allow the end-users to access to their office PC from the Internet via the web mode by RDP or VNC, however, many attempts show that it doesn' t work and seems cannot found out what port it needs... so we just allowed the users to use tunnel mode. Any advise? Many thanks~

[rwpatterson]

I use only tunnel mode. Much easier as the FGT doesn' t have to proxy everything.

[wcbenyip]

Tunnel Mode is good for support person and/or the one who want more than RDP/VNC/Telnet/FTP, performance is also a issue. However, the Web Mode is suitable for most of the users who just want to access to their office PC, as they can do the things via the web mode interface and also the bookmark, it would be more flexible especially you are in the public area.... the coffee shop would not allow you to use RDP or VNC.