RE: how prevelant

["Melson, Paul" <PMelson () sequoianet com>]

> -----Original Message-----
> how common is it for a company to have it's NT domain and 
> novell athentication pass openly across the internet, and 
> have this be the requirement to access VPN tunnel rights from 
> outside into the company?

Not at all.  I can't think of a current or even recent firewall/VPN
product that requires this type of configuration.  Every product I am
familiar with has some way of handing off domain/directory
authentication via RADIUS, LDAP, or whatever so that user authentication
data is encrypted and handled as part of the tunnel negotiation.  To do
what you describe undermines the primary advantage of VPN client access.

PaulM



 
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards