Re: Vpn concentrator - health care client

[lonely wolf <wolfy () nobugconsulting ro>]

Kris Wingard wrote:
> We have a health care client who is looking into a VPN solution.  They
> need to allow up to 500 different users to come in over a VPN to run a
> web application, though will probably never have more than 50 concurrent
> connections.  They only have about 30 users at the main office who get
> out to the internet, etc.  We were considering recommending a PIX 501 to
> secure the connection and a VPN 3005 concentrator to terminate the VPN
> connections.  I would prefer to put in a PIX 515 so we could put the
> concentrator in a DMZ, but they are very price sensitive and they don't
> really need a 515 at all.  My question is, is it ok (being that they are
> healthcare) to simply put the concentrator behind the PIX 501 and just
> forward the VPN traffic in to it?  Any insight would be appreciated.
> Thanks!
how about forgetting about Cisco, get an OLD PC (<200$), spend another 
200$ on a REAL linux admin and have the job done in half an hour ?

There are plenty of available FREE VPN solutions (openswan / vtun / a 
bunch of other solutions) and none is too hard to install.