This restriction means that the SAS session would have to be started on the same machine as the Web server from which the applets were downloaded.
Many firewalls prohibit applets from establishing socket connections beyond the firewall.
However, most firewalls allow HTTP protocol to pass through the firewall, so if the communication is done with HTTP protocol, applets are able to communicate with servers that they would not normally be allowed to communicate with. If you are using the tunnel feature to allow an applet to communicate with machines other than the Web server from which it is downloaded, you can use the Java Plug-in software instead. What's more, because the tunnel feature gives you complete control over who can access what, you gain these benefits without sacrificing security for your vital data. Java and all Java-based trademarks and logos are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. 2001 SAS Institute Inc. All Rights Reserved.