RE: Something new?

["David Gillett" <gillettdavid () fhda edu>]

  I'm currently evaluating a box from BlueSocket that
seems to provide this functionality.  It's marketed 
as a security management solution for wireless, but
there's no actual requirement that clients be wireless.

  The other solution I've used (which might be a better
fit if your network traffic is not primarily web-based)
is to configure a Cisco 30xx VPN concentrator to do
domain authentication.  Users create a tunnelled session 
by logging in their VPN client to the gateway, and this
logs them onto the domain with the same credentials.
  From there it's all domain, share, and NTFS permissions.
(Doesn't work so well with non-NT/2000 clients.)

David Gillett


> -----Original Message-----
> From: Steve S [mailto:jbodisks () yahoo com]
> Sent: April 21, 2003 11:50
> To: security-basics () securityfocus com
> Subject: Something new? 
>
>
> Trying to figure out if anyone has seen or heard of
> some type of gateway or method for setting up an OS to
> be a gateway to authenticate all users before they
> have access into a NT/2000 network.  The thinking
> behind this would be the end-user would only be able
> to connect to the internal network through this
> gateway (i.e. access to all servers and associated
> ports on the internal network would be blocked until
> authentication occurred and then you would be
> restricted by your personal access level).  Looking to
> expose only a single point internally instead of a
> myriad of servers.


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
world's premier event for IT and network security experts.  The two-day 
Training features 6 hand-on courses on May 12-13 taught by professionals.  
The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
sales pitches.  Deadline for the best rates is April 25.  Register today to 
ensure your place.  http://www.securityfocus.com/BlackHat-security-basics 
----------------------------------------------------------------------------