Distributing Cisco VPN Client [7:72061]

2003-07-09 Thread Doug Korell
I am getting ready to roll out the Cisco VPN client (3.6.4) and looking for
tips on the easiest way to do this. I currently have it on a FTP site and
setup as a self extracting file that extracts to c:\temp and then launches
setup.exe automatically.

Now for the profile I want people to use. I do not want to talk people
through the profile setup or really give out the VPN group password. So, I
was going to have the user somehow copy the profile file that I created to
the Cisco VPN profile directory but I've noticed this directory doesn't get
created till a profile is manually configured.

Anyone find a great solution to get this out with minimal problems?

Thanks.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72061&t=72061
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Distributing Cisco VPN Client [7:72061]

2003-07-09 Thread Ben W
If you place the profile .pcf files in the same location as setup.exe, in
your temp directory, then setup will automatically install them.  If you run
a silent install it makes it really easy.

Doug Korell wrote:
> 
> I am getting ready to roll out the Cisco VPN client (3.6.4) and
> looking for tips on the easiest way to do this. I currently
> have it on a FTP site and setup as a self extracting file that
> extracts to c:\temp and then launches setup.exe automatically.
> 
> Now for the profile I want people to use. I do not want to talk
> people through the profile setup or really give out the VPN
> group password. So, I was going to have the user somehow copy
> the profile file that I created to the Cisco VPN profile
> directory but I've noticed this directory doesn't get created
> till a profile is manually configured.
> 
> Anyone find a great solution to get this out with minimal
> problems?
> 
> Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72062&t=72061
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Distributing Cisco VPN Client [7:72061]

2003-07-09 Thread Joseph Brunner
You can 'push' the .pcf file profile during the install with a
simple batch file, or via the .ini file utility that comes with
the client.

the best way, is setup a vpn package, with silent install. It will
install and reboot the clients.

The group user/name is encrypted in the pcf file, so I dont know
how far you want to go to secure it... Once that pcf file
is out there, that is all someone needs to tunnel in (then
a username completes the authentication process).

So telling everyone the group password, and pushing the pcf file
around for the config settings are both insecure. Pick your Poison.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72063&t=72061
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Distributing Cisco VPN Client [7:72061]

2003-07-09 Thread Doug Korell
I agree about either way of setting up the profile is not secure. My
thinking is if they know the group username and password, they can call up
their buddy and tell them it. But if I never give it to them, then they need
to know a little bit about the client and where that information is kept.

Authentication and accounting is in place so it is secure from that
standpoint. I'll try out some of the suggestions mentioned and see how it
works. I've read where you can modify the msi file with ORCA (or something
like that) which I've played with in the past but don't have time to mess
with it.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72066&t=72061
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]