开发者

iPhone - Send VPN traffic for a specific URL

开发者 https://www.devze.com 2022-12-19 07:40 出处:网络
I am building a iPhone web based app for our execs to view sales data. The app goes over SSL with a typical login page that sets a cookie for the day.

I am building a iPhone web based app for our execs to view sales data. The app goes over SSL with a typical login page that sets a cookie for the day.

Since the info is sensitive and we have a VPN at work I was hoping as a double precaution I could send all communications with this app over our VPN.

Is there a way I can route traffic over the VPN only for a specific URL? Does anyone have any more info开发者_StackOverflow on the "Send All Traffic" in the VPN configuration

Thanks


The app has very little control over the VPN. A properly configured HTTPS site (particularly employing bi-directional certificates) will give you the kind of protection you're looking for your application.

That said, I strongly advocate that business users send all data over the VPN in all cases. This eliminates a wide variety of attacks and provides the opportunity for additional monitoring and protection. Thus, I generally recommend using the "Send All Traffic" VPN configuration. This would allow you to move the app entirely internal, so that outsiders cannot access the login page.


Properly done HTTPS should be sufficient. Provision the phone with a client certificate (there's a tool for that) and ensure the server checks them... and use a revocation list on the server side in case of stolen phones.


Making settings and managing the VPN routers and servers in iPhone is not easy. You should to make some HTTPS settings for this. After this, the client will be able to access your computer. Otherwise iphone vpn will lose its goal to run the server.

0

精彩评论

暂无评论...
验证码 换一张
取 消

关注公众号