Unfortunately, this still doesn't prevent a rogue application from
connection sniffing during the session establishment, and then reporting
passwords, IPs etc. later on when the VPN and SecureClient are down. Sort of
the same scenario that happened to Microsoft.
I'm starting to wonder if there's any way to prevent this type of situation
besides two-factor authentication like SecurID, SmartCards, etc.?
Geoff
-----Original Message-----
From: Luke, Jason (ISS Southfield) [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 31, 2001 8:59 AM
To: '[EMAIL PROTECTED]';
[EMAIL PROTECTED]
Subject: RE: [FW1] SecureClient and SecureRemote
SecureClient was designed to protect from that very scenario. SecureClient
has added functionality that the SecuRemote you know of. SecureClient has
the ability to download a desktop policy which limits what types of traffic
can come in and out of that laptop. Plus, you can force laptop users to
download a desktop policy or that cannot go anywhere, so they cannot get
around it-if they are still connected to your network via VPN. You need a
SecureClient user license, which is not free like SecuRemote. You will
create an object for your policy server, which will be your current mgmt
station, which the users download SecuRemote topology and SecureClient
Desktop policies from.
I believe the desktop policies are;
Allow All
Allow Outgoing only
Allow Outgoing and Encrypted
Allow Encrypted only
Jason
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 31, 2001 1:02 AM
To: [EMAIL PROTECTED]
Subject: [FW1] SecureClient and SecureRemote
Hello
Have anyone experience with SecureClient abbr. SecureRemote!
My problem is the security with both products! How secure is it ??
I thing when someone hack the PC ,which have installed this product, it have
full access to our IT-Infrastructure!
Is it possible to install it so that is no security problem ?
Best Regards
Mit freundlichen Grüßen
Manfred Steinbacher
EDS Austria - Core Infrastructure
Network Services
EDS Austria / AVL - Account
Phone: +43 316 787 470
Fax: +43 316 787 1783
eMail: [EMAIL PROTECTED]
Hans-List Platz 1 A-8020 GRAZ
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
