Question: How secure is MS PPTP? Isn't that a rather weak link? Michael Pease Manager, Networks MIS Matsushita Avionics Systems Corp. 22333 29th Drive SE Bothell, WA 98021 (425)415-9741 [EMAIL PROTECTED]
-----Original Message----- From: Vaughn Thurman - Swift Systems Inc [mailto:[EMAIL PROTECTED]] Sent: Monday, March 25, 2002 4:15 AM To: Brian Fort (Mushkin) Cc: [EMAIL PROTECTED] Subject: Re: [gb-users] Alternative VPN Solution My two cents... Put an MS (or other) PPTP server behind your firewall and setup the reverse proxy as seen in the docs on the GTA site. This allows you tight control over what the outside world is getting to on your PPTP server and it works flawlessly for us! Obviously this works best for you if you are an NT/2000 shop, but it is still worth looking at otherwise. The MS PPTP server [in Win2K] is extremely stable [knock on wood] and has allowed us to do a great deal of extranet + authentication sort of stuff. The GNAT box just passes the traffic through without a hitch. I raised the mobile client as an issue when I was evaluating the GB, but more because of the per client licensing, which doesn't make sense when faced with the alternative of the low cost of the MS setup. You can get the MS Server to do IKE connections, but frankly that's overkill here. -V ----- Original Message ----- From: "Brian Fort (Mushkin)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: "Bill" <[EMAIL PROTECTED]> Sent: Sunday, March 24, 2002 5:40 PM Subject: [gb-users] Alternative VPN Solution > I need to look into a workarounds for what is hopefully only a > temporary problem with the GNATBox Mobile VPN. My only options seem > to be either to switch to another brand of firewall, or setup a VPN > Server on my protected network. > > Does anyone have suggestions on VPN Server software or hardware that allows > for mobile VPN clients (mobile = dynamic IP addresses)? > > Does anyone have suggestions on Firewalls that have a stable solution > for mobile VPN clients? -Brian > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > To subscribe to the digest version first unsubscribe, then > e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
