RE: VPN Appliance that works with Microsoft?

[Tony Chryseliou <TonyC () bgls com>]

Thanks to all who responded. 

While the FreeBSD/Linux solutions are very worthy, they didn't fit my
original criteria, which was to have a "device" that had little if no moving
parts to break. A PC running BSD/Linux doesn't fit this criteria.

The SonicWall sounds promising because they make a full range of devices,
i.e., price range. I considered NetScreen, but they don't natively
authenticate against the AD/WinNT4 directories. Since the Sonic can talk
Win2k IPsec, I can leave a ISA Server running as the FW at HQ and use it for
the Lan-to-Lan tunnels, and to authenticate Win2k laptops. Stick the Sonics
in locations that have more than one folks.

Thanks again to everyone for their input.

TC

-----Original Message-----
From: Michael Nelson [mailto:mikenel () iapetus com]
Sent: Monday, January 29, 2001 1:21 PM
To: Behm, Jeffrey L.
Cc: 'Tony Chryseliou '; 'firewall-wizards () nfr com '
Subject: RE: [fw-wiz] VPN Appliance that works with Microsoft?


FreeBSD's IPSec implementation will also talk to Win2K IPSec.

-miek

On Sat, 27 Jan 2001, Behm, Jeffrey L. wrote:

> One client that I support has SonicWalls at the remote sites (on the end
of
> a cable/dsl internet connection) talking to MS Win2K IPSec back home at
HQ.
> Why the thought that "Nothing Works with MS IPSec?" It does, quite well in
> this case.
>
> Note that this puts the entire remote LAN effectively on the HQ LAN...it's
a
> LAN-LAN connection, not a Host to LAN connection.
>
> -----Original Message-----
> From: Jonn Martell [mailto:martell () ucs ubc ca]
> Sent: Friday, January 26, 2001 2:44 PM
> To: Tony Chryseliou
> Cc: firewall-wizards () nfr com
> Subject: Re: [fw-wiz] VPN Appliance that works with Microsoft?
>
> You might want to consider running Sonicwall or Watchguard with the VPN
> both at your HQ and the remote office.  Nothing works with Microsoft's
> proprietary implementation of IPSec (as far as I know). Unfortunately,
> Microsoft is continuing the "embrace and enhance" stuff. :-(
>
> Sonicwall has a wide range of products with the remote office versions
>
> <snip>
>
>  On Thu, 25 Jan 2001, Tony Chryseliou wrote:
>
> > Date: Thu, 25 Jan 2001 17:25:32 -0500
> > From: Tony Chryseliou <TonyC () bgls com>
> > To: firewall-wizards () nfr com
> > Subject: [fw-wiz] VPN Appliance that works with Microsoft?
> >
> > We're considering setting up an RRAS server to do VPN work and would
> like
> to
> > know if a VPN appliance (Sonic, Watchguard, etc.) out there works with
> L2TP
> > with IPSec encryption. The idea is to establish SOHO to HQ VPNs, but
> we
> > don't want to have a full blown server in each office to maintain.
> >
> > Thanks,
> > TC
> > _______________________________________________
> > firewall-wizards mailing list
> > firewall-wizards () nfr com
> > http://www.nfr.com/mailman/listinfo/firewall-wizards
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com
> http://www.nfr.com/mailman/listinfo/firewall-wizards
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com
> http://www.nfr.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards