Re: VPN Question

[yankl <yankl () yankele com>]

Jim,

Hospitality Industry does not have a standard for providing HSIA (High Speed 
Internet Access). In my experience working a wile in major hotel chain, only 
in last year HSIA became a major issue.  However, here some tricks:

1. Keep a web browser open during the VPN session.

Some HSIA servers drop your IP as soon as you close the web browser or e-mail 
client.

2. Renew an IP address right before connecting to VPN server.

Some servers will renew IP addresses after short time, I so as little as           
15 minutes.

3. Make sure that  you can accept multiple independent session from same IP 
address.

Usually hotels "NATing" IP addresses. If you have two users trying to connect 
from same hotel most of the time you will have one IP address connecting to 
you.

I am skipping cases where telephone cable connected to nics and such.

Report an incident to manager, they maybe know some tricks. 


On Friday 22 August 2003 16:31, DeGennaro, Gregory wrote:
> Jim,
>
> This is a hotel issue.  If it works in some and not in others, it means in
> this case that the source is the problem.  Unless you have round robin VPN
> IP addresses and your users do not know what the IPs are?  Which I highly
> doubt and why would you want to do this?
>
> Regards,
>
> Greg DeGennaro Jr., CCNP
> Security Analyst
>
>
> -----Original Message-----
> From: Jim Brezicky [mailto:brezicky () infimed com]
> Sent: Friday, August 22, 2003 10:29 AM
> To: security-basics () securityfocus com
> Subject: VPN Question
>
>
>
>
> Good afternoon all,
>
> This posting is a little off track, but I'm hoping someone can help me
> anyway.
>
> I have a SonicWall Pro230 and I'm trying to do VPN with it. My users
> connect from some locations and not others. Example: They could connect
> from the Airport in Cincinnati, but not the airport in Las Vegas. Seems
> they can't connect in many (if any hotels). In speaking with SonicWall
> they said this is a known issue when connecting through a firewall on the
> hotel side.
>
> I know I'm not the first company to try this, and was wondering how others
> get by this issue? Or is this an inherent SonicWall issue.
>
> Most of my users are traveling Sales people, and will go all around the
> US, and Japan.
>
> Any insight would be GREATLY appreciated.
>
> Thanks,
>
> Jim Brezicky
> InfiMed Inc
>
> ---------------------------------------------------------------------------
> ---------------------------------------------------------------------------
> -
>
> ---------------------------------------------------------------------------
> Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
> October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
> technical IT security event.  Modeled after the famous Black Hat event in
> Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
> Symantec is the Diamond sponsor.  Early-bird registration ends September
> 6.Visit us: www.blackhat.com
> ---------------------------------------------------------------------------
> -


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------