Access Control for Bi-Directional Connections

VPN connections typically involve what are called forward connections, which are initiated by a user to a network resource. However, if you deploy network tunnel clients (Connect Tunnel or OnDemand Tunnel) to your users, bi-directional connections are enabled. Examples of bi-directional connections include an FTP server that downloads files to or uploads files from a VPN user, and remote Help Desk applications.

Within the Secure Mobile Access VPN, bi-directional connections include the following:

• Forward connections from a VPN user to a network resource.
• Reverse connections from a network resource to a VPN user. An example of a reverse connection is an SMS server that pushes a software update to a user’s machine.
• Cross-connections refer specifically to VoIP (Voice over IP) applications that enable one VPN user to telephone another. This kind of connection requires a pair of access control rules: one for the forward connection and one for the reverse connection.