Re: VPN Question
From: yankl (yankl_at_yankele.com)
Date: 08/23/03
- Previous message: Meidinger Chris: "RE: traceroute-like tool for UDP or TCP packet"
- In reply to: DeGennaro, Gregory: "RE: VPN Question"
- Next in thread: Burton M. Strauss III: "RE: VPN Question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: "DeGennaro, Gregory" <Gregory_DeGennaro@csaa.com>, Jim Brezicky <brezicky@infimed.com>, security-basics@securityfocus.com Date: Fri, 22 Aug 2003 22:43:44 -0400
Jim,
Hospitality Industry does not have a standard for providing HSIA (High Speed
Internet Access). In my experience working a wile in major hotel chain, only
in last year HSIA became a major issue. However, here some tricks:
1. Keep a web browser open during the VPN session.
Some HSIA servers drop your IP as soon as you close the web browser or e-mail
client.
2. Renew an IP address right before connecting to VPN server.
Some servers will renew IP addresses after short time, I so as little as
15 minutes.
3. Make sure that you can accept multiple independent session from same IP
address.
Usually hotels "NATing" IP addresses. If you have two users trying to connect
from same hotel most of the time you will have one IP address connecting to
you.
I am skipping cases where telephone cable connected to nics and such.
Report an incident to manager, they maybe know some tricks.
On Friday 22 August 2003 16:31, DeGennaro, Gregory wrote:
> Jim,
>
> This is a hotel issue. If it works in some and not in others, it means in
> this case that the source is the problem. Unless you have round robin VPN
> IP addresses and your users do not know what the IPs are? Which I highly
> doubt and why would you want to do this?
>
> Regards,
>
> Greg DeGennaro Jr., CCNP
> Security Analyst
>
>
> -----Original Message-----
> From: Jim Brezicky [mailto:brezicky@infimed.com]
> Sent: Friday, August 22, 2003 10:29 AM
> To: security-basics@securityfocus.com
> Subject: VPN Question
>
>
>
>
> Good afternoon all,
>
> This posting is a little off track, but I'm hoping someone can help me
> anyway.
>
> I have a SonicWall Pro230 and I'm trying to do VPN with it. My users
> connect from some locations and not others. Example: They could connect
> from the Airport in Cincinnati, but not the airport in Las Vegas. Seems
> they can't connect in many (if any hotels). In speaking with SonicWall
> they said this is a known issue when connecting through a firewall on the
> hotel side.
>
> I know I'm not the first company to try this, and was wondering how others
> get by this issue? Or is this an inherent SonicWall issue.
>
> Most of my users are traveling Sales people, and will go all around the
> US, and Japan.
>
> Any insight would be GREATLY appreciated.
>
> Thanks,
>
> Jim Brezicky
> InfiMed Inc
>
> ---------------------------------------------------------------------------
> ---------------------------------------------------------------------------
>-
>
> ---------------------------------------------------------------------------
> Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
> October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
> technical IT security event. Modeled after the famous Black Hat event in
> Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
> Symantec is the Diamond sponsor. Early-bird registration ends September
> 6.Visit us: www.blackhat.com
> ---------------------------------------------------------------------------
>-
---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
technical IT security event. Modeled after the famous Black Hat event in
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
Symantec is the Diamond sponsor. Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------
- Previous message: Meidinger Chris: "RE: traceroute-like tool for UDP or TCP packet"
- In reply to: DeGennaro, Gregory: "RE: VPN Question"
- Next in thread: Burton M. Strauss III: "RE: VPN Question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|