The VPN question

[Jay Graham <jwg+ () PITT EDU>]

Hello Folks,

Here at Pitt we are in the process of a few VPN projects.

We currently have an SSL VPN (Juniper SA6000s in a redundant config) and 
are testing Cisco ASAs as our IPSec solution.

Background:

With our SA6000s we create roles to protected resources based on LDAP 
groups and currently have over 300 roles. We are now implementing the 
Pulse Client for this so that iOS and other platforms can use it to 
access protected resources. With the SA6000s you need to create a 
"seperate" Pulse role for these users. We are thinking of only creating 
Pulse roles for people that request them rather than just duplicating 
all 300 roles believing that not all users will need all roles from the 
iPad (or other device). (We are not supporting Pulse for Windows or Mac 
OSes yet, just for mobile devices)

The Question:
What are other schools doing for mobile device VPN solutions and how are 
you giving users access to their roles?

Thanks in advance.
Jay Graham