SSL VPN in China

[gis-emea]

Hi all, I have been trying to find information on

this. We are opening new officeces in china and we need to be able to give SSL VPN accesses to our in-country users. However I am not sure if SSL VPN /WebVPN is allowed in China.

Can some one please give some more info on this.

Regards

[Jennifer Halim]

There are no law per say that disallow SSL VPN within China that I know off, and there are plenty of companies in China that uses SSL VPN.

China however does have the "great firewall of china" that inspect all internet traffic, here is more information from wiki:

http://en.wikipedia.org/wiki/Great_Firewall_of_China

I would recommend that you engage local Chinese authority to confirm the usage of SSL VPN for 100% certainty, however, as far as I know many companies do use SSL VPN within China.

[gis-emea]

Thanks Jennifer,

I was looking to get ASA5505 with Advanced Security devices for my China Sites. Cisco Website says we can only have ASA5505-K8 model which does not support 3des and AES encryption(for L2L or IPSec) . However our supplier in China saying they can provide ASA5505-K9 with Advance Security License. Does that mean I can use 3DES or AES encryption if I decide to use L2L VPN there ?

Do you know what's Cisco's Position regarding this matter ?

[Jennifer Halim]

Correct, I believe that hardware with 3DES/AES encryption license can not be shipped into China, hence the supplier normally only has K8 hardware instead of K9 hardware. However, once the hardware itself is already in China, you can add 3DES/AES license to it.

Here is the ASA export compliance guideline and there is no mention of China in specific:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_qas0900aecd805a1273.html

[gis-emea]

Many thanks Jennifer, I was looking for that Doc and clarification.