Robert,
Although this does not answer your exact problem, it provides a possible
alternative solution for keeping costs down. Have a look at www.signify.net
for low cost secure authentication.
Cheers
Simon Hornby
>From: Peter Goodridge <[EMAIL PROTECTED]>
>To: Robert Hough <[EMAIL PROTECTED]>,
>[EMAIL PROTECTED]
>Subject: Re: [FW1] VPN & Securemote & Encryption Domain Definition
>Date: Mon, 29 Jan 2001 05:48:53 -0800 (PST)
>
>
>Hi Rob,
>
>Can't you have the firewall at site B check
>authentication by accessing the Securid server at Site
>A. You'll want to be very careful that all the
>traffic is encrypted.
>
>HTH,
>Pete Goodridge
>
>--- Robert Hough <[EMAIL PROTECTED]> wrote:
> >
> > I have two firewalls in two geographic locations
> > with a VPN between them.
> > Site A also allows users to connect to the Site A
> > internal network
> > 10.0.100.x via securemote. My firewalls are
> > "managed" by a large vendor who
> > is telling me now that we cannot have users connect
> > to the firewall in Site
> > A and via the firewall VPN connect to Site B's
> > network via the firewall vpn
> > to connect to network 10.0.101.x because of the
> > encyption domain.
> >
> > The solution that was recommended was to allow users
> > to connect to the
> > firewall in Site B and access the network via that
> > point. However, we are
> > using Securid for authentication and really do not
> > want to set up another
> > server in the Site B location. The offices are
> > small and we are trying to
> > keep costs down. Anyone had this scenario and an
> > innovative solution to
> > allow us to connect
> > to Site B via the firewall vpn between A & B?
> >
> > Thanks...rob
> >
> >
> >
> >
>================================================================================
> > To unsubscribe from this mailing list, please
> > see the instructions at
> >
> > http://www.checkpoint.com/services/mailing.html
> >
>================================================================================
>
>
>__________________________________________________
>Do You Yahoo!?
>Yahoo! Auctions - Buy the things you want at great prices.
>http://auctions.yahoo.com/
>
>
>================================================================================
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>================================================================================
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
