Dynamic VPN Overview

Virtual private network (VPN) tunnels enable users to securely access assets such as e-mail servers and application servers that reside behind a firewall. End-to-site VPN tunnels are particularly helpful to remote users such as telecommuters because a single tunnel enables access to all of the resources on a network—the users do not need to configure individual access settings to each application and server. See Figure 53.

The dynamic VPN feature further simplifies remote access by enabling users to establish Internet Protocol Security (IPsec) VPN tunnels without having to manually configure VPN settings on their PCs or laptops. Instead, authenticated users can simply download the Access Manager Web client to their computers. This Layer 3 remote access client uses client-side configuration settings that it receives from the server to create and manage a secure end-to-site VPN tunnel to the server.

Note: The dynamic VPN feature is disabled by default on the device. You must enable and configure it before you can use it.

Related Topics

• Junos OS Feature Support Reference for SRX Series and J Series Devices
• Dynamic VPN Configuration Overview
• Understanding Dynamic VPN Client Configurations
• Understanding Dynamic VPN Global Client Download Settings
• Understanding the Dynamic VPN and Access Manager User Experience
• Access Manager Client-Side System Requirements