Re: Authentication on PIX, WatchGuard, Safe@Office & SonicWall

From: Leythos (void_at_nowhere.com)
Date: 12/12/03


Date: Fri, 12 Dec 2003 11:28:43 GMT

In article <67gitvcadr4mbrp9pc8i627m2atv1rgce1@4ax.com>,
kennisonCUTITOUT@goodnet.com says...
[snip]
> Thanks again for all the info. I now have a much better idea how to
> approach this now. Time for me stop being lazy and do it the VPN way.

I travel the country and have access to my own networks and clients
networks with this method always.
 
> Do you recommend going the branch office approach for the links to the
> home computers (rathe than mobile)? Is it more secure? More
> reliable? Faster? Other reason?

It depends, I have one client that has two PC's in his home, one is a
laptop (that he takes to/from work) the other is his home PC that is
mostly for business. He has a NAT router with an IPSEC tunnel to the
office. This lets him use the home workstation to make backup's of
private data (offsite) and also join the domain when he logs in.

When I connect to his network I use the mobile user VPN software.

> I have definately had good experience with the Linksys BEFSX41, so if
> it make a good BO link to the Firebox that would be great.
>
> I would still use the mobile approach for the road warriors I guess.

The mobile user software works well, I've not had any problems with it.
I use it for clients that have traveling support or sales staff.

> Of the firewalls I initially mentioned (PIX 506E, Firebox III 500/now
> 700, Safe@Office, SonicWall Pro 230) I expect you will probably
> recomment the Firebox 700, correct? Or do you think one of the others
> would actually be better for what I am trying to do?

They are all fine units, but, when I get a chance, I always go
WatchGuard. I've used all of the vendors for years (cept Safe@Office),
and actually bought a WG FB for my home.

In the early days Sonic really pi$$ me off, real bad support, they got
better but it still left me with a bad impression - you would have
thought that a name like Kelloggs (company) would have got me a
somewhere with them....

> I am definately leaning towards the Firebox now, but almost feel this
> sadistic need to cut my teeth on the PIX first (I do have a little
> experience with their routers)

Actually, in cases where I install something that the client might have
a hope of maintaining it, I never install a PIX, I always install a WG.
I've worked on units in government offices, medical centers, home
offices, etc, WG has never let them or me down.

One thing - the WG units come with a 1 year support agreement, and you
should maintain the yearly renewal of that agreement - it get's you
firmware updates and the support you may need.

> Anyway, Thanks Again
> Tracy
>
>

-- 
--
spamfree999@rrohio.com
(Remove 999 to reply to me)


Relevant Pages

  • Re: From VC6 to .NET 2 questions
    ... Tech support is expensive. ... controls, or something that involves automation, either as a client or server. ... but those decisions are not mine but my clients'). ... correct version was installed because it was part of their install support problem. ...
    (microsoft.public.vc.mfc)
  • Re: Another Best Practice Questioen
    ... No doubt the reason they don't install is that SMS 2003 RTM does not support ... Workgroup support is for Advanced Clients only. ...
    (microsoft.public.sms.setup)
  • Re: Using Terminal Services for client support.
    ... Our main reason for looking into switching programs is the clients we ... Many want us to use Terminal Services to support the servers we ... install rather than having to purchase a PcAnywhere license. ...
    (microsoft.public.windows.terminal_services)
  • Re: No MS Licence Support 24 / 7??? Client Add On Pack Password Problem
    ... When you purchase your replacement ... >> install and the Client Add on Pack disk will not allow me ... >> to install the clients on this different hardware without ... >> a password from MS support. ...
    (microsoft.public.backoffice.smallbiz2000)
  • RE: Dynamic LINQ ITable
    ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ... Subject: Dynamic LINQ ITable ... We enable our clients to create custom fields they wish to ...
    (microsoft.public.dotnet.languages.csharp)