Before everything, thanks again.... now:
> I would only use this when my full PKI deployment requires SSL auth and my
> sec policy requires authentication at perimeter.And never think about other
> services else than http..
Why do you say this? Do you mean that if I use regular SecuRemote or
SecureClient then I'd have problems using clientless vpn?... why?
LB
On Sun, 2003-01-05 at 16:59, Efes wrote:
First of all I'd rather use ssh and tunnelled connections if it is
possible..simple and secure answer for your vpn needs..
Though I did not spend time on clientless VPN the idea seems simple.
1- Enable clientless VPN on gateway
2- Add a certificate to gateway
3- Add a rule (service http user auth, or aut. client auth.)
4- Add a certificate to client (optional)
The logic is;gateway will intercept all the http connections that match the
rule and the client starts a new the ssl connection (re-direction?).
Connection between the client and the gateway is encrypted (ssl). Gateway
establishes a second cleartext connection to http server..
Basically gateways acts like an ssl offloader (accelerator) for the http
connections.
cheers,
- yinal ozkan
I would only use this when my full PKI deployment requires SSL auth and my
sec policy requires authentication at perimeter.And never think about other
services else than http..
--- Leonardo Boulton <[EMAIL PROTECTED]> wrote:
> Yes, it came to my mind the clientless VPN (which actually I understand
> is not a new feature of NG FP3 but they just renamed it).
> Have you used this?... Can you give me a main idea of the way it works
> before I put my hands on it?.
>
> Thanks,
>
> LB
>
> On Sun, 2003-01-05 at 01:28, Efes wrote:
> If your gateway is NG FP3 you may try clientless VPN feature over http.
> By the way Checkpoint is working on TCP Tunnelling-TCPT (another beta
program)
>
> fyi,
> - yinal ozkan
>
> --- Leonardo Boulton <[EMAIL PROTECTED]> wrote:
> > Hi lads,
> >
> > Can any of you tell me of a way to establish remote VPN connections from
> > a Linux workstation ( other than the SecureClient Beta program) to a
> > Check Point gateway?.
> >
> > Cheers,
> >
> > LB
> >
> >
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
