Packets from the user directed to those IP addresses in the authorization list flow through an IPSec tunnel established during login. It uses cryptography to provide both authentication and encryption facilities. Authentication helps to ensure that packets are from the sender with correct user identification and have not been altered in transit.
Encryption helps prevent unauthorized reading of packet contents.
If the dual access capability has been specified, packets destined for IP addresses outside those in the authorization list downloaded during log in will be sent to the Internet. An algorithm combining a rolling list of recently contacted remote hosts determines a packet's solicitation status. This allows users to get on line when away from their broadband Internet connection and gives a backup capability in case the broadband connection fails. The consistent interface simplifies deployment by reducing training, support, and end user configuration requirements when switching back and forth between broadband and dial access. Customers are advised to contact their ISP if they are uncertain about any of the above requirements.