Re: VPN/Firewall recommendations?

--
[ Picked text/plain from multipart/alternative ]
We also use a Netopia firewall router for VPN, NAT, DHCP, and routing.
 Works great, easy to setup and maintain.  I would purchase another one
if I had to.  Also, came with some great documentation for what you
needed to do on the client and the router to configure the VPN.  We have
our remote people connecting via Client Access into it.

    Pete Massiello

Jerome Draper wrote:

>You can replace the LinkSys cable/DSL router/gateway with a like model that
>supports VPN.  I have been successfully using Netopia (less than $500)
>products for this purpose.  They do both NAT and VPN and so act as an
>effective firewall as is.  The only way thru is via the userid/pw combo over
>VPN.
>
>Once in via VPN you are assigned an inside private address and can go
>anywhere on the LAN including the ability to tn5250 to the AS400 which I do
>with Synapse IP Client.
>
>Jerry
>
>>I would like some advice about VPN and/or firewall equipment/software.
>>
>I've
>
>>been looking alittel at CheckPoint's stuff - combined VPN/firewall
>>solutions. I thought I saw some such solution at Symantec.
>>
>>1. We want to be able to get connected from home or on trips, probably
>>using VPN.
>>      - Right now we use some rudimentary address forwarding on a LinkSys
>>cable/DSL gateway (1-WAN, 8-LAN)
>>
>>2. We want to be able to present demos and pitches and, possibly, remote
>>support using Sametime
>>      - We currently use a service called WebEx (?), quite expensive. Feel
>>we could save money with Sametime and its app sharing, as well as
>>whiteboard facilities
>>
>>3. We are not sure about a Linux solution, as we have limited knowledge of
>>that OS - I've installed Debian multiple times, but it's a risk that we'd
>>like to avoid for now.
>>
>>4. I'd LIKE to keep all our systems inside our private network, if
>>
>possible
>
>>Setup:
>>
>>- Cisco 675 modem, used only for connecting to ISP,  with 255.255.255.248
>>mask on inside of Cicso 675 (5 usable static IP addresses - all these
>>
>don't
>
>>seem very useful right now - no names attached)
>>
>>- 5-port hub (switch?) for that subnet
>>
>>- LinkSys gateway as firewall, static address on Wan port, 192.168.1.x on
>>
>8
>
>>LAN ports.
>>
>>- 2 400s on inside, as well as various PCs, all various flavors of Windows
>>    - 1 400 is our development box - accessible only to employees
>>    - 1 400 is a test/demo box - Sametime server, Domino server (internal
>>mail, calendar)
>>
>
>
>_______________________________________________
>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
>To post a message email: MIDRANGE-L@midrange.com
>To subscribe, unsubscribe, or change list options,
>visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
>or email: MIDRANGE-L-request@midrange.com
>Before posting, please take a moment to review the archives
>at http://archive.midrange.com/midrange-l.
>
>
>.
>

--