Security Basics mailing list archives

Re: Deploying SSL-based VPNs


From: Kenton Smith <listsks () yahoo ca>
Date: Fri, 31 Mar 2006 16:29:01 -0500 (EST)

Sorry if I misunderstand you here. Are you saying this
is the way you think it *should* be done, or the way
you think it *is* done?
This is not the way it *is* done. there are plenty of
IPSec client to server VPN's (most are actually).
Every Microsoft Desktop O/S since 2000 has included
the client builin, and servers since 2000 have the
server included. Most hardware VPN gateways use IPSec
for their VPN's as well. SSL is a relatively new VPN
technology only widely deployed over the last couple
of years.

Kenton

--- Alice Bryson <abryson () bytefocus com> wrote:

hi, there
    IMHO, i think ssl vpn is used by individual pc
to gateway while
ipsec vpn is used by gateway to gateway situation.
ipsec vpn need a
client application which not suitable for a mobile
pc or net bar pc.
ssl vpn donot need install client application.


2006/3/29, Joe <bitshield () gmail com>:
Hi all

I'm currently interested in SSL-VPN solutions,
problems and
deployments. Personally I prefere much more the
term „SSL-based remote
access" since almost all those products (except
OpenVPN) claiming to
be SSL-VPNs don't offer any network functionality.
Would you guys
share your experiences?

What are the issues you spotted when deploying
SSL-based remote access
solutions?

Any experiences with certain products? (my company
for example made
bad experiences with iGate from SafeNet)

What features make an SSL-remote access solution a
good one?

I know these are some very general questions.

Thanks anyway
Joe



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE
- ONLINE
The Norwich University program offers unparalleled
Infosec management
education and the case study affords you unmatched
consulting experience.
Tailor your education to your own professional
goals with degree
customizations including Emergency Management,
Business Continuity Planning,
Computer Emergency Response Teams, and Digital
Investigations.

http://www.msia.norwich.edu/secfocus


---------------------------------------------------------------------------




--
Homepage:http://www.lwang.org
We collect spam for research at:
mailto:abryson () bytefocus com


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE -
ONLINE
The Norwich University program offers unparalleled
Infosec management
education and the case study affords you unmatched
consulting experience.
Tailor your education to your own professional goals
with degree
customizations including Emergency Management,
Business Continuity Planning,
Computer Emergency Response Teams, and Digital
Investigations.

http://www.msia.norwich.edu/secfocus

---------------------------------------------------------------------------




__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: