# What is an SSL/TLS VPN?

> An SSL/TLS virtual private network (VPN) is an industry label for remote-access technology that uses Transport Layer Security (TLS) to protect communication between a client and a VPN gateway.

- Canonical URL: https://yellowcube.eu/glossary/ssl-tls-vpn/
- Publisher: Yellow Cube
- Language: en
- Contact: hello@yellowcube.eu

## Content

The historical name includes Secure Sockets Layer (SSL), but SSL is obsolete; deployments should use supported TLS versions and current cryptographic configurations.

Some SSL/TLS VPNs provide browser or reverse-proxy access to defined web applications. Others use client software to tunnel traffic for non-web applications or broader network access. The gateway terminates TLS, authenticates the user or device, applies access policy, and forwards authorized traffic toward internal or cloud resources.

### Key points

- **Access scope:** Establish whether the service exposes individual applications, selected network routes, or a general tunnel, and enforce only the access required for the subject’s role.
- **Protocol security:** Disable obsolete SSL and TLS versions, validate certificates and hostnames, use current algorithms, protect session tokens, and maintain a reliable update process.
- **Gateway and client risk:** Harden the internet-facing service, monitor authentication and session events, secure downloaded components, and manage browser, extension, or client-software dependencies.
- **Important limitation:** TLS protects the client-to-gateway leg, not necessarily traffic beyond the gateway. It does not establish endpoint health, application authorization, or user intent, and a stolen authenticated session may bypass the original sign-in controls.

### Related terms

[Virtual private network (VPN)](<https://yellowcube.eu/glossary/virtual-private-network/>) · [Remote-access VPN](<https://yellowcube.eu/glossary/remote-access-vpn/>) · [Split tunneling](<https://yellowcube.eu/glossary/split-tunneling/>) · [Multi-factor authentication (MFA)](<https://yellowcube.eu/glossary/multi-factor-authentication/>) · [Zero trust network access (ZTNA)](<https://yellowcube.eu/glossary/zero-trust-network-access/>) · [Transport Layer Security (TLS)](<https://yellowcube.eu/glossary/transport-layer-security/>)

### Sources

[NIST SP 800-113: Guide to SSL VPNs](https://csrc.nist.gov/pubs/sp/800/113/final) · [IETF RFC 9846: The Transport Layer Security Protocol Version 1.3](https://datatracker.ietf.org/doc/rfc9846/) · [IETF BCP 195: Recommendations for Secure Use of TLS and DTLS](https://datatracker.ietf.org/doc/bcp195/)

## Attribution and scope

This Markdown representation is generated from the same approved content records as the canonical HTML page. Cite the canonical URL above when referencing this material. Product and service descriptions are informational; confirm project-specific requirements with Yellow Cube.