Re: Solaris to Netscreen 50
Michael Ray <[email protected]>
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Organization | Cotse |
| Message-ID | <[email protected]> |
On Mon, 22 Mar 2004 22:41:17 -0500, you wrote: > >Hello, > >I have a client that has a bunch of remote Solaris boxes that need to terminate into the corporate NS-50 firewall. Does anyone know of a VPN client off the shelf for Solaris that will work the the Netscreen boxes? Cisco and F-Secure have clients for Solaris. http://www.cisco.com/univercd/cc/td/doc/product/vpn/client/rel401/401_clnt.htm http://www.datafellows.com/products/vpnplus/ Sun also has IPSEC implemented on Solaris. http://wwws.sun.com/software/whitepapers/solaris9/ipsec.pdf http://wwws.sun.com/software/solaris/ds/ds-security/ds-security.pdf http://wwws.sun.com/software/solaris/encryption/download.html >Any help or ideas would be greatly appreciated. I have not terminated Solaris to Netscreen but have done so successfully with quite a few different OSes and IPSEC capable devices. (Free/Open/NetBSD, various Linux distros and clients, Windows 2k, XP, 2003. Checkpoint, Cisco, Nortel, Cyberguard and I know I am missing a couple others). I suggest that you create custom Phase1 and Phase2 proposals. You will also want to make sure your NAT traversal and mode is correctly set (aggressive vs main) and supported on the Solaris side. I use VPN monitor when I have the Netscreen connecting to a non-Netscreen device as IKE-heartbeat is only for Netscreen to Netscreen. Here are a few links on Solaris IPSEC, how-to, etc. Three part Securityfocus article: Configuring IPsec/IKE on Solaris, Part One http://www.securityfocus.com/infocus/1616 Configuring IPSec and Ike on Solaris, Part Two http://www.securityfocus.com/infocus/1625 Configuring IPsec and IKE on Solaris, Part Three http://www.securityfocus.com/infocus/1628 Cisco: Cisco VPN Client User Guide for Linux and Solaris http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_user_guide_book09186a00801728a1.html http://www.cisco.com/application/pdf/en/us/guest/products/ps2308/c1629/ccmigration_09186a008015cff4.pdf Implementing IPSec in the SolarisTM 8 Environment http://www.samag.com/documents/s=1323/sam0110c/0110c.htm You can also find some knowledgebase articles on Netscreen's site. >Joel <snip sig> I hope that helps. Mike