Since I contributed to an Off Topic thread to become even more off topic
I'll continue.
I don't know about you but I work for my employer, they don't work for
me. If senior management gets marketed to by a vendor that could care
less about standards, let's see, Microsoft, Cisco, Juniper, IBM and on
and on, then decides to purchase and implement one of these vendors
solutions I'll implement it. If I don't like it I can change jobs, I
don't take time to piss and moan about stupid management decisions.
My day time place of employment has Juniper SA boxes, personally I
think they are bizarre to say the least. I would never subject one of
my personal systems to connecting to that network.
You aren't going to convince corporate types how great OpenVPN is on
OpenBSD. The sad thing is US management blames SOX for decisions to
not use Open Source software, they need a liability trail, which
buying from a commercial entity provides.
I'm putting my soap box away for the day.
diana
On Wed, 16 Sep 2009, Lars Nooden wrote:
Diana Eichert wrote:
You should ask your corporate types if they support you as a user
Any question starting like that is going to get answered quickly "NO!"
by PHBs. Ask if they support SSL connections. That will tell you if
they are trying for 'security' but simply unable to, or if they have an
axe to grind and are using the VPN for a non-technical agenda.
This should be about standards, not some brain-dead push to sell
boondoggles, regardless of whose cousin's shop is the reseller.
Also, speaking of brain-dead. Avoid the term "support" until you are
clear about how they define it. A lot of places have several tiers of
"support" ranging from having to be local experts on a tool to only
being able to install the package and say "you're now on your own"
If there is difficulty, arrange a pilot with OpenVPN on OpenBSD and run
a few use cases, gather a few metrics (ignoring previous thread on
metrics). You can show increased "security" and, more importantly, savings.
/Lars
