Security Basics mailing list archives

RE: Deploying SSL-based VPNs


From: "Hayes, Ian" <Ian.Hayes () wynnlasvegas com>
Date: Mon, 3 Apr 2006 10:10:14 -0700

The docs specify that you just need Sun Java 1.4.1 or greater for
Windows, Mac and Linux. MS JVM 1.1 is also supported.

Ian Hayes | Senior Systems Engineer
Wynn Las Vegas
3131 South Las Vegas Blvd, Las Vegas, NV 89109
Ph (702) 770-3252 | Cell (702) 266-6002
Ian.hayes () wynnlasvegas com
 
-----Original Message-----
From: Joe [mailto:bitshield () gmail com]
Sent: Sunday, April 02, 2006 11:15 PM
To: Hayes, Ian
Cc: security-basics () securityfocus com
Subject: Re: Deploying SSL-based VPNs

Hi Ian

Junipers solutions seems to have a very good reputation. Do you have
any idea about the dependencies of the java clients? Active-X
certainliy depends on an IE explorer. I heard from products (i.e.
SafeNets iGate) that they rely on one specific java version. There
were also problems with differen SP.
All those restrictions create huge problems if the clients are not
identically configured (which is usually never the case).

Thanks
Joe


On 3/30/06, Hayes, Ian <Ian.Hayes () wynnlasvegas com> wrote:
-----Original Message-----
From: Joe [mailto:bitshield () gmail com]
Sent: Tuesday, March 28, 2006 11:52 AM
To: security-basics () securityfocus com
Subject: Deploying SSL-based VPNs

Hi all

I'm currently interested in SSL-VPN solutions, problems and
deployments. Personally I prefere much more the term "SSL-based
remote
access" since almost all those products (except OpenVPN) claiming
to
be SSL-VPNs don't offer any network functionality. Would you guys
share your experiences?

What are the issues you spotted when deploying SSL-based remote
access
solutions?

Any experiences with certain products? (my company for example
made
bad experiences with iGate from SafeNet)

What features make an SSL-remote access solution a good one?

I know these are some very general questions.

Look at the SA3000 (formerly known as Neoteris) from Juniper
Networks.
It's a very robust SSL-VPN that has a lot of features and granular
network control. It has an ActiveX client for windows and the Java
client actually works on Macs. Haven't tested it on Linux


Ian Hayes | Senior Systems Engineer
Wynn Las Vegas
3131 South Las Vegas Blvd, Las Vegas, NV 89109
Ph (702) 770-3252 | Cell (702) 266-6002
Ian.hayes () wynnlasvegas com



------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec
management
education and the case study affords you unmatched consulting
experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus

------------------------------------------------------------------------
---





---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: