Re: Firewall/VPN

[Evan Wagner <ewagner () Radix Net>]

Greetings,

Where I work we implemented Altiga/Cisco VPN concentrators with the
3DES IPSec client (note: new client software release is coming very soon
and the beta stuff works well on Win9x, NT 4.0 WS and 2K professional). My
predecessor chose Raptor on NT for firewalling and we are in the process
replacing them (as the servers approach end of relaible service) with PIX
firewalls.

Overall I'm happy with the VPN solution and the PIXes. Authentication
works fine to our NT network through the VPN concentrators. We've defined
a number of LAN to LAN VPN tunnels on the Raptor boxen for redundancy and
we are slowly migrating them over to the Cisco VPN concentrators. We also
use VPN tunnels as backup for our Frame Relay network and it works well.

Let me know if you have further questions about this solution.

Regards,

--Evan

On Wed, 3 Jan 2001, Tony Chryseliou wrote:

> Greetings:
>
> I've worked with Checkpoint VPN-1 products in the past and I'm looking to 
> implement a firewall and VPN for a client. The things I like about the CP 
> product were:
>
> 1. The ability to use the OS password (NT4) for the user's VPN client 
> software, I believe this is called pass-through authentification.
>
> 2. Auto-updating of the main LAN network topology sent down to the VPN 
> client once logged in. What I mean by this is that if NAT'ed network objects 
> were defined on the firewall/VPN-gateway, they were automatically added to 
> the topology file that gets downloaded to the client.
>
> My question is, is there other products out there (preferably hardware 
> based) that have similar features to these? I really want to get away from 
> Checkpoint, because of cost, lousy support, and flakiness.
>
> All insights appreciated.
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com
>
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com
> http://www.nfr.com/mailman/listinfo/firewall-wizards


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards