RE: VPN

["Westdorp, Tom" <Tom.Westdorp@xxxxxxxxxxxxxxxxxx>]

Thanks!

I just spoke with my network geeks and the CISCO stuff is changing the
default gateway when the client connects.

My argument to them is they should provide a methodology to enforce client
quality, a connection verification program that tests for anti-virus
signature freshness and a complete scan within a reasonable time period,
etc.

VPN users are our employees, we could spec Symantec AV, for example, and
check for the above and not have to ruin the VPN's convenience and attack
other networks in order to provide reasonable protection of the company
network.  Gets risk level equivalent to office computers with floppy drive,
CD drive, ZIP drive, etc exposures.  Doing it the way we are now is just a
lazy way to protect and needlessly penalizes responsible client connections.

-----Original Message-----
From: John Ross [mailto:jross-ml@netshare400.com]
Sent: Wednesday, February 05, 2003 12:35 PM
To: Midrange Systems Technical Discussion
Subject: RE: VPN


Try this
Start
My network places
View network connections
Right click dialup connection
Properties
Network (tab)
Properties
Advance
uncheck - Use default gateway on remote network

I would think VPN is going to have to change how it works soon. How many 
companies would put a percentage of their PC's out side of the firewall. I 
can load up on viruses on my home PC and then connect to a companies lan 
via VPN behind the firewall, map a drive leave some of the viruses and 
never even know that happened.

John Ross

At 08:54 AM 2/5/2003 -0800, you wrote:
>I think under WinXP Pro (my desktop OS) you get just one IP per system.
>When I used dial up to a RAS server through a serial port to an external
>modem it killed my ability to access the net through the cable modem until
I
>ended the dial up session.  I could be wrong and have a spare NIC laying
>around, I'll talk to our network geeks and try it if it's a possibility.


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.