Secure Socket Tunneling Protocol: Difference between revisions

Revision as of 10:38, 27 February 2016

Revision as of 21:23, 11 May 2016

Line 1:

{{distinguish|Simple Symmetric Transport Protocol}}

'''Secure Socket Tunneling Protocol''' (SSTP) is a form of [[Virtual private network|VPN]] tunnel that provides a mechanism to transport [[Point-to-Point Protocol|PPP]] or {{citation needed span|text=[[Layer 2 Tunneling Protocol|L2TP]]}} traffic through an [[Transport Layer Security|SSL]]/[[Transport 3.0Layer Security|TLS]] channel. SSL/TLS provides transport-level security with key-negotiation, [[encryption]] and traffic integrity checking. The use of SSL/TLS over [[Transmission Control Protocol|TCP]] port 443 allows SSTP to pass through virtually all [[Firewall (computing)|firewalls]] and [[proxy server]]s except for authenticated web proxies.<ref>{{cite web

| url=http://blogs.technet.com/b/rrasblog/archive/2007/01/17/sstp-faq-part-2-client-specific.aspx

| title=SSTP FAQ - Part 2: Client Specific

Line 9:

| accessdate=2015-10-17}}</ref>

SSTP servers must be [[authentication|authenticated]] during the SSL/TLS phase. SSTP clients can optionally be authenticated during the SSL/TLS phase, and must be authenticated in the PPP phase. The use of PPP allows support for common authentication methods, such as [[EAP-TLS]] and [[MS-CHAP]].

SSTP is available for [[Linux]], [[BSD]], and [[Windows]].<ref>{{cite web