RE: encryption options for public networks?
"Casey Halverson" <[email protected]>
| Newsgroups | gmane.network.wireless.seattle.devel |
|---|---|
| Message-ID | <[email protected]> |
Matt, you ARE missing something!!! :) http://www.f5.com/f5products/products/FirePass/ http://www.juniper.net/products/ssl/ra_500.html We actually have an F5 FirePass sitting in the office. The concept is simple: Open a web browser, and surf to the firepass via HTTPS. You get a login screen. Enter your login and password, and something magical happens.....Depending on your platform, the next page contains a special ActiveX or Java applet. This ActiveX/Java applet establishes a NAT-friendly, SSL VPN tunnel to the SSL VPN box. The app also listens to special loopback addresses, forwards DNS queries, etc. over this VPN. SSL VPN boxes allow you to specify very strict, application-level policies to permit/deny access to specific hosts on your remote/internal network. Its good stuff too...because me, the dumb user, can surf to a webpage, login, and start loading up Microsoft Outlook, surfing to intranet pages, and connecting via terminal server to Windows and Unix hosts. Not to mention, all other applications also work. With some configuration, you could actually make it so when any webpage is requested, it is redirected to the SSL VPN box, and authenticates the user without signon...perhaps give them a splash page after the fact. > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Matt Westervelt > Sent: Friday, January 21, 2005 2:11 PM > To: SeattleWireless Development List > Subject: Re: encryption options for public networks? > > Simply opening a web broswer doesn't get you VPN unless I've > completely missed something. You have to either download > software or set up > networking in your control panels. Once that's done, you > have to click > something to connect to the server. > > Watching the video setup at hotspotvpn.com doesn't inspire me > with 'grandma safe' either. > > There's a ton of clicking on control panel options, wizards, etc. > > <http://hotspotvpn.com/inwinxp.asp?mm=3> > > Watch the video. It's great. It's still running. > > > -matt > > > Casey Halverson wrote: > > >I like ssh tunneling, but ssh tunneling is not as easy as > opening a web browser. _______________________________________________ Dev mailing list [email protected] http://seattlewireless.net/mailman/listinfo/dev