Thanks for the quick response, I will take your thoughts into account.
Much appreciated
Mike
"Reale, Charles" <[EMAIL PROTECTED]> on 15/06/2000 13:57:40
To: Mike Anning/WEY/EU/CHEP@CHEP
cc:
Subject: RE: [FW1] Altiga VPN Concentrator
Hi Mike,
We just implemented an Altiga box in our organization (about 1 week ago).
While it hasn't been hit pretty hard yet, it seems like a great system. I
also implemented an older version of Altiga at a previous company and it
worked well. We chose to install this box because for our users,
SecureRemote was too difficult for them to install from home, laptops, etc.
It also occasionally had some problems which were difficult to diagnose.
The Pros-Easy to set up (both client and server), monitoring capabilities,
secure, allows multiple connection and authentication methods (NT, Radius,
etc). You can pre-configure the client and then push it out to your users,
so all they will have to do is click setup. The client is small, less than
3MB. The client is only active when you want it, it doesn't lay in wait like
SecurRemote.
The Cons-The client software. The VPN GUI isn't supported with Windows 2000,
therefore you have to use W2K's VPN to connect to the Altiga box using L2TP.
To do so requires installing a certificate on both Altiga and the W2K
client. It is quite a nightmare, and to tell you the truth, we haven't
gotten it working yet. Mostly because we haven't a W2K IIS Cert server on
the internet to install certs from (You need a cert server that has the
capability to create PKCS#10 Certs). Another issue revolves around the MS OS
and the Altiga client. I place most of the blame on MS. In certain
circumstances a MS machine will not release it's former LAN IP address,
which leads to flaky problems when connecting to the Altiga box (routing,
browsing, etc.). A simple ipconfig /release /renew fixes the problem, but it
is a nuisance.
The only other thing to add is that Altiga was just purchased by Cisco, so
they are still working on minor details, tech-support for example..... I
know it will eventually get better, but it gets annoying when you call
tech-support and you realize that you know more about this newly installed
box than the support person on the other end of the phone.
Hope this helps
Regards,
C-
-----Original Message-----
From: Mike Anning [mailto:[EMAIL PROTECTED]]
Sent: Thursday, June 15, 2000 4:45 AM
To: [EMAIL PROTECTED]
Subject: [FW1] Altiga VPN Concentrator
Hi all
Currently running Nokia (3.2.1) with v4.0 SP4 with the vpndes option to
allow
remote users access via the Internet.
Currently have around 250 users connecting at various times from anywhere
around
Europe and things seem fairly rosy.
Our sister organisation is pushing us to use one of the Altiga (Cisco) VPN
Concentrator systems instead of SecuRemote and the FW.
Does anyone have any experience or comments about this system, problems with
it,
advantages, gotchas.....
Much appreciated
Mike
----------------------------------------------------------------------------
-----
DISCLAIMER:
This E-mail is strictly confidential and intended solely for the addressee.
It may contain information that is covered by legal, professional or other
privilege. If you are not the intended addressee you must not use, disclose
or
copy this transmission.
This E-mail is not intended to impose nor shall it be construed as imposing
any
legally binding obligation upon CHEP and/or any of its subsidiaries or
associated companies.
Neither CHEP nor any of its subsidiaries or associated companies gives any
representation or warranty as to the accuracy or completeness of the
contents of
this E-mail.
CHEP shall not be held liable to any person resulting from the use of any
information contained in this E-mail and shall not be liable to any person
who
acts or omits to do anything in reliance upon it.
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
