3005 & SSL VPN

[pdulfo]

Plans are now ahead to upgrade the IOS on our 3005s. Once upgraded we will have the ability to use the SSL VPN. Anybody any comments on using this (good or bad). So I know how much effort I should exert in getting it working.

In theory I would like to use it to make life easier for external support agencies rather than setting them up with the full Cisco software client.


---------------------------------
PDulfo aka pdiddy

 

[ecowarrior]

its great for technical people to use for remote sessions.

if you intend to have users then i would strongly suggest using web based applications for them, as the interface for ssl vpn is still quite dated.

i am sure cisco will catch up when they sort out the security first.

 

[dopehead]

I find that many times the only problem with the real vpn client is the ppl installing it, so make a good manual or make a silent install with the .pcf packaged in there so the user has no options to click other than just executing the file you send him/her.

Jan


Network Systems Engineer
CCNA/CQS/CCSP/Infosec

 

[pdulfo]

dopehead We have an install with the required .pcf file already. Our real issues are with 3rd party companies that may do some of our support. When using the traditional client, I do spend as absurd amount of time giving support to our support companies. Its amazing how many 'technical' companies have no idea about their own firewall. In some situations it has taken weeks to get a single port opened.


---------------------------------
PDulfo aka pdiddy