The problem I have with the VPN Client on PC approach is the loss of the ability to manage the PC as if its on our LAN. With a network based VPN solution the PC would boot up and retrieve group policy from active directory like any other PC on the network. Logons could be done with the domain just like any other user as well. I also don't have to deal with the learning curve of explaining the VPN to users who can barely deal with outlook.
Any ideas? I hear that Sonicwall works with Gnatbox VPN? Chris Green -----Original Message----- From: david raistrick [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 22, 2002 9:29 AM To: Mike Burden Cc: Gnatbox Subject: RE: [gb-users] VPN connection to other devices On Tue, 22 Jan 2002, Mike Burden wrote: > I think that the person that posted the question > mentioned that some sites would be connected by > DSL. I haven't done a lot of research into it, > but I think most DSL providers are still offering > static IP addresses. I'd say that depends on the type of account. A large number of providers prefer to deploy dynamic addresses for residential xDSL...those that dont are generally very small and havent realized the scale problems associated with static addressing (for low end/low cost service). BUT! If you're talking about business class xDSL, then yes. Static IP addressing is pretty much a standard..ranging from a single IP to an appropriate sized subnet. > where it fits the budget) or reduce the number > of GBLs that might have to be managed in the > event of an IP change. Now, excuse my ignorance on this subject..but there is only one way to find out. :) John was suggesting, I think, that instead of using the GBL w/ VPN option at the dynamic sites, to instead put a GBL at the site, and a VPN client on each end-user PC. (the PC would handle the VPN, not the GBL...the PC VPN client can support the dynamic addresses, from what I understand.) Of course, the VPN-on-PC option doesnt scale far...it would be a lot of work for a dozen or two users at a site. But for 1 to 2 users, it shouldnt be a problem at all... DISCLAIMER: I only work here, and am learning the product line slowly. Do listen to my suggestions with that in mind. ...david --- David Raistrick Systems Administrator - Global Technology Associates, Inc [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
