Security Basics mailing list archives

Re: Worldwide authentication


From: ONEILL David J <David.J.Oneill () state or us>
Date: 18 Oct 2002 07:32:27 -0700

My .01 cent ... dump the VPN before your mainframe becomes a internet candy
store.

David J. O'Neill
NEDSS - IS7
Parkway Bldg., 2nd Floor
Phone: (503) 378-2101 ext. 364
FAX:     (503) 378-2102

marti () videotron ca 10/17/02 06:34PM >>>
Hi everybody,

One of our client need to authenticate users that are roaming from city
to city. 

They don't necessarly own portable PCs. 

We need to authenticate the users to let them access data from the
mainframe. 

Note that the data is very sensitive.

What is the (esiest/not too expensive) solution?

We are already using Cryptocard/Cisco for our VPN.

We've looked at USB key token, certificates...

Our idea is to use a SSL session with authentication, need to decide
wich authentication solution is best.


---
 

@>-->-- 



Merci

Mart!

******************************************

Pens e de la semaine :  La seule chose que nous ayons   craindre, c'est
que le ciel nous tombe sur la t te. 
Martin M Samson
Chef de projets,

                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                                              
                                                          

Current thread: