Access to instance with VPN
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-23-2015 12:14 PM
Hi,
For example, I setting up a VPN on my network with ServiceNow.
For accessing the instance (via web/tablet/etc) in my home, I must be connected to any client of VPN? Or I have to access with a client VPN?
Message was edited by: Gabriel Terra Oliveira
- Labels:
-
Integrations
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-23-2015 01:53 PM
That depends on what VPN option you choose with ServiceNow.
1) They use to allow ALL traffic to be routed over a VPN, but they may have eliminated that option.
2) The more common scenario is to use a VPN for LDAP connections (authentication).
The first would require a VPN connection on mobile devices, the second would not.
Side note: If the second scenario is what you're talking about, there is no longer a need for VPN if you're using a Single Sign-On solution.
Starting with Calgary(?) or Dublin, you can route LDAP imports through at MID Server -- and SSO doesn't require a VPN to be secure.
Second side note:
I would STRONGLY DISCOURAGE routing all traffic over a VPN. Categorically, my customers that have started down that path have turned it off because of the load, performance, maintenance and additional single-point-of-failure it creates.
If you're concerned about people accessing the environment, I would suggest using the IP Address Access Control features instead.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-26-2015 04:15 AM
Thanks a lot, Valor.
Is the exactly second scenario. I need this for authentication with LDAP.
So, with VPN for LDAP(authentication), do you think I wont have problem with access the instance outside the office network?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎02-16-2015 08:22 PM
LDAP over VPN -- you won't have any issue accessing from the outside world (and I would hope your Implementation Partner could tell you this!).