A CCESS GATEWAYIntroduction 17The NSE supports a comprehensive HTTP redirect logic that allows network administrators todefine multiple instances to intercept the browser’s request and replace it with freelyconfigurable URLs.Portal page redirect enables redirection to a portal page before the authentication process. Thismeans that anyone will get redirected to a Web page to establish an account, select a serviceplan, and pay for access. Home Page redirect enables redirection to a page after theauthentication process (for example, to welcome a specific user to the service—after the userhas been identified by the authentication process. See also, “Portal Page Redirect” on page 21.iNAT™Nomadix invented a new way of intelligently supporting multiple VPN connections to thesame termination at the same time (iNAT™), thus solving a key problem of many publicaccess networks.Nomadix’ patented iNAT™ (intelligent Network Address Translation) feature contains anadvanced, real-time translation engine that analyzes all data packets being communicatedbetween the private address realm and the public address realm.The NSE performs a defined mode of network address translation based on packet type andprotocol (for example, ISAKMP, etc.). UDP packet fragmentation is supported to provide moreseamless translation engine for certificate-based VPN connections.If address translation is needed to ensure the success of a specific application (for example,multiple users trying to access the same VPN termination server at the same time), the packetengine selects an IP address from a freely definable pool of publicly routable IP addresses. Thesame public IP address can be used as a source IP to support concurrent tunnels to differenttermination devices—offering unmatched efficiency in the utilization of costly public IPaddresses. If the protocol type can be supported without the use of a public IP (for example,HTTP, FTP), our proven Dynamic Address Translation™ functionality continues to be used.Some of the benefits of iNAT™ include: Improves the success rate of VPN connectivity by misconfigured users, thus reducingcustomer support costs and boosting customer satisfaction. Maintains the security benefits of traditional address translation technologies whileenabling secure VPN connections for mobile workers accessing corporate resourcesfrom a public access location. Dynamically adjusts the mode of address translation during the user's session,depending on the packet type. Supports users with static private IP addresses (for example, 192.168.x.x) or public(different subnet) IP addresses without any changes to the client IP settings. Dramatically heightens the reusability factor of costly public IP addresses.
