When using a browser that shares the cookies between multiple tabs/windows, the cookie is accepted as valid (since it is). In order to not allow this, you will need to use an aggressive idle session timeout; there is no way to clear the cookie/session until the user logs out OR the session times out. This is a limitation of the cookie sharing. ... View more

passthrough proxy via ports is only on port 11000-11099. the rewrite through to the backend, though, yes, can use any port. no, you cannot connect to the system on another port other than 443. ... View more

This is the right forum for this query. What do you mean by different virtual host names vs the same back-end URL: is this for access a la passthrough proxy or authorization only URL on the IVE OR is it the backend server link? If you are using either of the IVE options, yes, you are correct it will not work as the actual hostname on the intranet is required to be unique.   As you noted, you have several options to use to work within the IVE framework:   one with the actual FQDN and the other with: IP; or fake name using the hosts file on the IVE; or different internal FQDN both using fake accesses via IVE hosts file   Good luck! ... View more

What are the longterm prospects of Network Connect? Reason I ask is that it seems as if industry is hedging almost everything on ssl/secure portals, rather than a traditional ipsec vpn session, for a mobile laptop. But thank you for your answer, that's what I was looking for. ... View more