Re: Recommendations for VPN end point appliances?

2004-06-16 Thread Travis Roy
The thing that really worries me is: A VPN box that is doing things incorrectly will appear to work just like a VPN box that is doing things correctly. Unless you actually try and crack it, you'll never know that it, say, is using the same session key over and over again. I would have to say t

Re: Recommendations for VPN end point appliances?

2004-06-16 Thread bscott
On Tue, 15 Jun 2004, at 9:38am, [EMAIL PROTECTED] wrote: > These will be the last Linksys VPN boxes I buy ... based on my experience > trying to configure them. Yah, like I said, LinkSys is pretty horrible for VPN stuff. The thing that really worries me is: A VPN box that is doing things inco

Re: Recommendations for VPN end point appliances?

2004-06-15 Thread Hewitt Tech
- Original Message - From: "Bruce Dawson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 15, 2004 11:14 AM Subject: Re: Recommendations for VPN end point appliances? On Tue, 2004-06-15 at 09:38, Hewitt Tech wrote: > These will be the last Link

Re: Recommendations for VPN end point appliances?

2004-06-15 Thread Bruce Dawson
On Tue, 2004-06-15 at 09:38, Hewitt Tech wrote: > These will be the last Linksys VPN boxes I buy based on my experience trying > to configure them. It took me a couple of hours just to get the two boxes to > talk to each other. They have remained connected for 24 hours or so but the > setup was ver

Re: Recommendations for VPN end point appliances?

2004-06-15 Thread Hewitt Tech
- Original Message - From: <[EMAIL PROTECTED]> To: "Greater NH Linux User Group" <[EMAIL PROTECTED]> Sent: Sunday, June 13, 2004 1:14 PM Subject: Re: Recommendations for VPN end point appliances? > On Fri, 11 Jun 2004, at 10:51pm, [EMAIL PROTECTED] wrote: >

Re: Recommendations for VPN end point appliances?

2004-06-14 Thread bscott
On Mon, 14 Jun 2004, at 10:13am, [EMAIL PROTECTED] wrote: > Public-key crypto in SNMP would probably be unweildy, especially since > SNMP is supposed to have a light footprint to make it easy to put into > small embedded systems. That's not the point I was making. > A lot of customers just want

Re: Recommendations for VPN end point appliances?

2004-06-14 Thread Kevin D. Clark
Chris <[EMAIL PROTECTED]> writes: > [EMAIL PROTECTED] wrote: >> >> On Sun, 13 Jun 2004, at 9:40pm, [EMAIL PROTECTED] wrote: >> >> ... shared secrets went out in the 1980s ... >> > >> > Maybe, but SNMP V3 still uses it.. >> >> That's hardly an endorsement. SNMP's approach to security

Re: Recommendations for VPN end point appliances?

2004-06-14 Thread bscott
On Mon, 14 Jun 2004, at 9:32am, [EMAIL PROTECTED] wrote: > He dropped one line that really annoyed me. He stated that Windows Server > 2003 performed a new authentication protocol that would break most Samba > network share setups. It's not new. There has long been a feature in NT that supports

Re: Recommendations for VPN end point appliances?

2004-06-14 Thread Hewitt Tech
- Original Message - From: "Chris" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, June 13, 2004 10:07 PM Subject: Re: Recommendations for VPN end point appliances? > > > [EMAIL PROTECTED] wrote: > > > > On Sun, 13 J

Re: Recommendations for VPN end point appliances?

2004-06-13 Thread Chris
[EMAIL PROTECTED] wrote: > > On Sun, 13 Jun 2004, at 9:40pm, [EMAIL PROTECTED] wrote: > >> ... shared secrets went out in the 1980s ... > > > > Maybe, but SNMP V3 still uses it.. > > That's hardly an endorsement. SNMP's approach to security issues has > generally been to ignore them.

Re: Recommendations for VPN end point appliances?

2004-06-13 Thread bscott
On Sun, 13 Jun 2004, at 9:40pm, [EMAIL PROTECTED] wrote: >> ... shared secrets went out in the 1980s ... > > Maybe, but SNMP V3 still uses it.. That's hardly an endorsement. SNMP's approach to security issues has generally been to ignore them. (SNMP = Security? Not my problem!) The

Re: Recommendations for VPN end point appliances?

2004-06-13 Thread Chris
[EMAIL PROTECTED] wrote: > > On Fri, 11 Jun 2004, at 10:51pm, [EMAIL PROTECTED] wrote: > > ... does anyone have any recommendations for VPN end point appliances. > > My experience with LinkSys VPN boxes is that they are flakey and have an > abysmal feature set. Th

Re: Recommendations for VPN end point appliances?

2004-06-13 Thread bscott
On 13 Jun 2004, at 1:32pm, [EMAIL PROTECTED] wrote: >> I've had someone recommend SnapGear to me ... > > If you're speaking of the ClearPath SNAP box... No, I'm speaking of SnapGear. http://www.snapgear.com Hmmm... they appear to have been bought by CyberGuard. Since I don't really know any

Re: Recommendations for VPN end point appliances?

2004-06-13 Thread Brian
On Sun, 2004-06-13 at 13:14, [EMAIL PROTECTED] wrote: > I've had someone recommend SnapGear to me; it is apparently a Linux-based > appliance. Haven't had a chance to actually look into it, though. > If you're speaking of the ClearPath SNAP box... It *is* linux-based, but not really shipping

Re: Recommendations for VPN end point appliances?

2004-06-13 Thread bscott
On Fri, 11 Jun 2004, at 10:51pm, [EMAIL PROTECTED] wrote: > ... does anyone have any recommendations for VPN end point appliances. Of all the appliances I've used, my favorite is NetScreen. Outstanding features and performance at a competitive price. Gotta love that SSH CLI. Soni

Re: Recommendations for VPN end point appliances?

2004-06-12 Thread Jerry Feldman
ing bad about their products now that I think about it. > > -Alex > > - Original Message - > From: "Brian" <[EMAIL PROTECTED]> > To: "Hewitt Tech" <[EMAIL PROTECTED]>; "Greater NH Linux User > Group"<[EMAIL PROTECTED]>

Re: Recommendations for VPN end point appliances?

2004-06-12 Thread Cole Tuininga
I'm using linux boxes running FreeS/WAN myself. Had quite good luck with it... -- "... one of the main causes of the fall of the Roman Empire was that, lacking zero, they had no way to indicate successful termination of their C programs." -- Robert Firth Cole Tuininga Lead Developer Code E

Re: Recommendations for VPN end point appliances?

2004-06-12 Thread Hewitt Tech
Linux User Group" <[EMAIL PROTECTED]> Sent: Saturday, June 12, 2004 6:52 AM Subject: Re: Recommendations for VPN end point appliances? > On Fri, 2004-06-11 at 22:51, Hewitt Tech wrote: > > I need them for a client that wants to > > have secure access to their office from a

Re: Recommendations for VPN end point appliances?

2004-06-12 Thread Brian
On Fri, 2004-06-11 at 22:51, Hewitt Tech wrote: > I need them for a client that wants to > have secure access to their office from a remote worker's home office. Any > suggestions? SonicWall and Fortinet have both worked well for us. ___ gnhlug-discuss

Recommendations for VPN end point appliances?

2004-06-11 Thread Hewitt Tech
Since we're on the topic of network hardware recommendations - does anyone have any recommendations for VPN end point appliances. I had used some 3Com 3CR-856 firewall/router/VPN end points with good results but 3Com has discontinued them. I ordered a pair of BEFSX41 LinkSys routers but ha