RE: Deploying SSL-based VPNs

Juniper has one of the best SSL VPN solutions that I have used on the
market today. It completes end point analysis before allowing the VPN
connection.

If you want the client to access local resources Citrix makes a great
hybrid SSL-VPN w/ Ipsec device. The Citrix secure access appliance
completes endpoint analysis along with resource limitations. It launches
a local client that does not require any installation and allows your
users to access resources as if they were located on the local segment.

I favor the Citrix solution over the Juniper because it has a lot of
additional options.

That's my 2Cents

Juniper Link Below
http://juniper.net/products/ssl/

Citrix Link Below
http://www.citrix.com/English/ps2/products/product.asp?contentID=15005


Charles J. Hammett Jr.
A+ Net+ INet+ Security+ Server+ MCSA MCSE CCEA CCNA JNCIA-FWV
Senior Network Operations Center Engineer
DP Solutions

9160 Red Branch Road, Suite W-1
Columbia, MD 21045
Baltimore (410) 720-3300 Ext. 131
Washington (301) 858-5609 Ext. 131
Fax (410) 992-3559
www.dpsolutions.com



-----Original Message-----
From: Joe [mailto:bitshield@xxxxxxxxx]
Sent: Tuesday, March 28, 2006 2:52 PM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Deploying SSL-based VPNs

Hi all

I'm currently interested in SSL-VPN solutions, problems and
deployments. Personally I prefere much more the term "SSL-based remote
access" since almost all those products (except OpenVPN) claiming to
be SSL-VPNs don't offer any network functionality. Would you guys
share your experiences?

What are the issues you spotted when deploying SSL-based remote access
solutions?

Any experiences with certain products? (my company for example made
bad experiences with iGate from SafeNet)

What features make an SSL-remote access solution a good one?

I know these are some very general questions.

Thanks anyway
Joe

------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • Re: remote office vpn products
    ... I have had very good experiences with the TZ170. ... > Hi Lucian, ... > Linksys products. ... > When using Netopia I used to use their vpn but switched to port forwarding ...
    (microsoft.public.windows.server.sbs)
  • Re: Replication over DSL using VPN
    ... VPN is not supported in Jet and our experiences with it are BAD. ... > As a general question: ... > This is over standard DSL with a VPN connection. ...
    (microsoft.public.access.replication)
  • 0xc004000c error result from ISA on VPN connection attempt
    ... This connects via VPN to connect to Exchange to get mail. ... Please hold your fire on the wisdom of buying this device--that isn't in my control. ... He believes that the VPN connection is shutting down correctly--i.e. ... I'd be interested in hearing of other experiences with this error--nearly all the Google hits just parrot the Microsoft explanatory text for the error which I've not been able to turn into useful advice for correcting it! ...
    (microsoft.public.windows.server.sbs)
  • Re: Netscreen VPN client
    ... Where could I find a windows XP compatible netscreen (Juniper) VPN ...
    (comp.security.firewalls)
  • Router VPN vs Windows VPN
    ... I have been looking at the Windows SBS2K3 VPN and comparing it to other VPN ... options such as Netgear's FVS318 VPN router. ... experiences you have had with VPN's. ...
    (microsoft.public.windows.server.sbs)