Getting rid of dial-up modems is more difficult than it looks, but you can
certainly reduce the costs :-)
I'd avoid MS-PPTP, there've been a number of analyses & exploits which
would concern me. YMMV and so forth. Definitely look for something IPSEC.
There are a number of appliance-type boxen, some of which may be cheaper
than the encryption module. PGPNet from NAI would also be worth checking
out. If money is a major problem, you can build your own appliance-type
box using Linux and Free/SWAN or SSH. Depending on your level of
expertise, that last option might take a lot of time, especially since the
last time I checked the encryption module for 250 users listed at $3K or
so.
HTH
Jack Coates, Rainfinity SE
t: 650-962-5301 m: 650-280-4376
On Fri, 7 Jul 2000, Shane Hill wrote:
>
> Hi Gurus,
>
> Sorry if this is slightly off the FW-1 topic.
>
> I have about ten mobile users, some of which travel globally.
> All dial into my DMZ for internet / mail access.
>
> I thought I'd put VPN-1 module onto my NT4 FW-1 server,
> have the users dial an ISP then create a VPN back to the office
> and as if by magic telephone charges are reduced and I can remove the dial
> in modems.
>
> But the VPN-1 module is just too pricey for my small base of mobile/home
> users.
>
> Should I look at placing a Microsoft VPN solution on the Web server in my
> DMZ
> - cheap, but is it a fashion no no?
>
> Or should I stick with my current - working - dial in option?
>
> Any opinions gratefully received.
>
> Microsoft products are quite cheap for academic institutions -
> so not to much MS bashing if it can be helped. ;-)
>
> Thanks,
>
> Shane Hill
> [EMAIL PROTECTED]
>
> University of Wales
> University Registry
> King Edward VII Avenue
> Cathays Park
> Cardiff
> CF10 3NS
>
> Tel: 029 20786206
> Fax: 029 20396040
>
>
>
> ================================================================================
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ================================================================================
>
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
