17.1 Understanding How SSL VPN Connects Through a Forward Proxy

When a user initiates a connection to SSL VPN server through a browser, SSL VPN uses the following process to connect:

  1. SSL VPN checks to see if the browser is configured to use a proxy.

  2. If it is, SSL VPN checks for the proxy.conf file in the user’s home directory.

  3. If a proxy configuration file is present, the following occurs:

    1. SSL VPN checks for the format of the file. If the information provided in the file is not in the correct format, SSL VPN proceeds with Step 4.

    2. If the configuration information is in the correct format, SSL VPN reads the proxy information from the proxy.conf file, then proceeds with Step 6.

  4. If the proxy configuration file is not present or if the information is not in the correct format, SSL VPN checks for proxy configuration information from the browser registry or profile.

  5. If SSL VPN is unable to get the proxy configuration information either through the proxy.conf file or through the registry, it throws an error asking the user to edit the proxy.conf and tries to establish a direct connection.

  6. SSL VPN reads the proxy configuration information and attempts to connect to the resource without the proxy. If this attempt fails, the SSL VPN connection is made through the forward proxy.