Yes - PGPNet does exactly the same thing as the Securemote client. The only
difference is that you can sign the user's PGP key with the CA.
Bret
At 19:01 2/05/00 -0400, you wrote:
>The customer is using Checkpoint VPN-1 and its SecuRemote Client. If they
>use PGPNet, would there be any duplication?
>
>
>----- Original Message -----
>From: "Vincent Illaire" <[EMAIL PROTECTED]>
>To: "Ivan Fox" <[EMAIL PROTECTED]>
>Cc: "Firewall-Wizards@Nfr. Net" <[EMAIL PROTECTED]>; "Firewall-1"
><[EMAIL PROTECTED]>; "Firewalls@Lists. Gnac. Net"
><[EMAIL PROTECTED]>
>Sent: Tuesday, May 02, 2000 5:58 PM
>Subject: Re: [FW1] OT - PGPNet and X.509
>
>
>Ivan Fox wrote:
>>
>> A customer has already had a PKI in place (Microsoft Certificate
>Authority,
>> Netscape LDAP and Netegrity's Siteminder). Does it need PGPNet? It seems
>> to me that they are doing similar thing.
>
>PGPNet is a desktop program than creates IPSec tunnels on Win95 and
>Win98. That's a standalone program for Windows 98 and NT 5, or Mac 7.6.
>
>It's not an authentication / sso system, it's a VPN client.
>
>It can use X509 certificates to authenticate the gateway to the client,
>and the client to the gateway. You need a PKI program to do that, PGPNet
>won't create the certificates. It can also use pre-shared keys.
>
>HTH.
>--
> Freelance S�curit�, Syst�me Unix & NT, R�seaux, et Logiciels Libres.
> Consultant Ind�pendant (Astux) AFUL / Apodeline / CLA / SCG
> m�l: [EMAIL PROTECTED] SMS: [EMAIL PROTECTED] (court!)
> T�l/fax: +33 1 43 33 51 33 GSM: +33 6 80 08 93 83 (fin proche)
>
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
>
Technical Incursion Countermeasures
[EMAIL PROTECTED] http://www.ticm.com/
voice mail/fax: (+65)98421426(UTC+8 hrs)
The Insider - a e'zine on Computer security
http://www.ticm.com/info/insider/index.html
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
