Resolution
WebVPN Port Forwarding provides access for remote users to client/server applications that communicate over known, fixed TCP/IP ports. Remote users can use client applications that are installed on their local PC and securely access remote servers that support those applications.
Refer to the Configuration | Tunneling and Security |WebVPN | Port Forwarding section of Tunneling and Security in order to configure this feature on the VPN 3000 Concentrator.
Note: This feature requires that you install Sun Microsystems Java Runtime Environment (JRE) and configure applications on the PC of the end user. Both require administrator permissions. It is therefore unlikely that users are able to use applications when they connect from public remote systems, such as Internet kiosks or web cafes.
WebVPN: Port Forwarding (Application Access) Java Issues
JAVA, Shockwave or Active X do not work through WebVPN. WebVPN Port Forwarding (Application Access) supports only Sun Microsystems Java. Microsoft Java is not supported. In order to run Port Forwarding (Application Access), you only need the JRE portion of J2SE version 1.4.1 or later.
Tip: It is strongly suggested that you manually download the JRE and not allow the applet to do it automatically for you. In order to download JRE for multiple Operating System platforms, visit the Java Software Manual Download center.
These issues exist with Port Forwarding (Application Access):
When you authenticate with certificates, the Port Forwarding (Application Access) Java applet does not work. Java cannot access the keystore of the web browser, therefore Java cannot use the certificates that the browser used for authentication.
When you click on a link , for example, one that is contained in an e-mail message, that link possibly uses the browser window that runs the Application Access Java applet, which renders Port Forwarding (Application Access) useless. Internet Explorer does not exhibit this behavior, but the Netscape and Mozilla browsers do have this problem and do not provide an option to prevent it.
When you use the TCP Port Forwarding feature in order to transmit files at broadband and Ethernet throughput speeds, the downloaded Java applet possibly uses a high amount of system processing power on the client PC. If you run Microsoft Visual Studio on a client PC, at times it possibly conflicts with the Port Forwarding Java applet in WebVPN. If you experience problems, close Visual Studio and restart WebVPN. TCP Port Forwarding (Application Access) does not work on a Windows ME PC that has Norton Antivirus loaded on it. When you attempt to load the Application Access menu, Norton Antivirus does not allow the forwarded TCP ports to be opened or possibly causes the PC to fail. This is a Norton Antivirus issue.
