Re: VPN/Firewall recommendations?

["Jerome Draper" <jdraper@xxxxxxxxxxxxx>]

You can replace the LinkSys cable/DSL router/gateway with a like model that
supports VPN.  I have been successfully using Netopia (less than $500)
products for this purpose.  They do both NAT and VPN and so act as an
effective firewall as is.  The only way thru is via the userid/pw combo over
VPN.

Once in via VPN you are assigned an inside private address and can go
anywhere on the LAN including the ability to tn5250 to the AS400 which I do
with Synapse IP Client.

Jerry

> I would like some advice about VPN and/or firewall equipment/software.
I've
> been looking alittel at CheckPoint's stuff - combined VPN/firewall
> solutions. I thought I saw some such solution at Symantec.
>
> 1. We want to be able to get connected from home or on trips, probably
> using VPN.
>       - Right now we use some rudimentary address forwarding on a LinkSys
> cable/DSL gateway (1-WAN, 8-LAN)
>
> 2. We want to be able to present demos and pitches and, possibly, remote
> support using Sametime
>       - We currently use a service called WebEx (?), quite expensive. Feel
> we could save money with Sametime and its app sharing, as well as
> whiteboard facilities
>
> 3. We are not sure about a Linux solution, as we have limited knowledge of
> that OS - I've installed Debian multiple times, but it's a risk that we'd
> like to avoid for now.
>
> 4. I'd LIKE to keep all our systems inside our private network, if
possible
> Setup:
>
> - Cisco 675 modem, used only for connecting to ISP,  with 255.255.255.248
> mask on inside of Cicso 675 (5 usable static IP addresses - all these
don't
> seem very useful right now - no names attached)
>
> - 5-port hub (switch?) for that subnet
>
> - LinkSys gateway as firewall, static address on Wan port, 192.168.1.x on
8
> LAN ports.
>
> - 2 400s on inside, as well as various PCs, all various flavors of Windows
>     - 1 400 is our development box - accessible only to employees
>     - 1 400 is a test/demo box - Sametime server, Domino server (internal
> mail, calendar)