Article View: comp.security.firewalls
Article #383Re: Authentication with Firewall-1 NG with AI
From: Jason Kau
Date: Mon, 26 Jan 2004 13:00
Date: Mon, 26 Jan 2004 13:00
23 lines
2190 bytes
2190 bytes
MichaelK <m_keightley@yahoo.co.uk> wrote: > Seems that S/Key authentication has been removed from the latest version > of Firewall-1 (NG with Application Intelligence R55). > We have lots of Linux and MacOSX users, SecuRemote only seems to be available > for Window$. SecuRemote NG is available for Redhat 7.2 and 7.3--not sure if it will work with later versions of RedHat. You should be able to get FreeS/WAN to work with VPN-1. As for MacOS X, you can use third-party VPN clients like VaporSec or Equinux VPN Tracker. > Found SecuRemote to be very flakey software on Windows anyway. SecuRemote NG FP3 Build 53515 has worked great for us on Win2K/XP. > So how are people meant to authenticate securely. RSA SecurID or any other time-synchronization tokens that can be accessed via RADIUS/TACACS, e.g. Vasco? Client certificates (Entrust or internal CA)? -- Jason Kau http://www.cnd.gatech.edu/~jkau
Technical Details
Message-ID:
<bv331f$jap$1@news-int2.gatech.edu>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!newsfeed2.dallas1.level3.net!news.level3.com!priapus.visi.com!orange.octanews.net!news.octanews.net!news-out.visi.com!hermes.visi.com!feed2.news.rcn.net!feed1.news.rcn.net!rcn!logbridge.uoregon.edu!arclight.uoregon.edu!news-ext.gatech.edu!news-int.gatech.edu!not-for-mailReferences:
<bdf31434.0401251102.69b77a54@posting.google.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,7dd47d72930ea9c7
X-Google-Attributes: gidf922c,public
X-Google-Thread: fc559,7dd47d72930ea9c7
X-Google-Attributes: gidfc559,public
X-Google-ArrivalTime: 2004-01-26 05:05:04 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!newsfeed2.dallas1.level3.net!news.level3.com!priapus.visi.com!orange.octanews.net!news.octanews.net!news-out.visi.com!hermes.visi.com!feed2.news.rcn.net!feed1.news.rcn.net!rcn!logbridge.uoregon.edu!arclight.uoregon.edu!news-ext.gatech.edu!news-int.gatech.edu!not-for-mail
From: Jason Kau <jkau@vulture.cnd.gatech.edu>
Newsgroups: comp.security.firewalls,cp.products.firewall-1
Subject: Re: Authentication with Firewall-1 NG with AI
Date: Mon, 26 Jan 2004 13:00:31 +0000 (UTC)
Organization: Georgia Institute of Technology
Lines: 23
Message-ID: <bv331f$jap$1@news-int2.gatech.edu>
References: <bdf31434.0401251102.69b77a54@posting.google.com>
NNTP-Posting-Host: vulture.cnd.gatech.edu
X-Trace: news-int2.gatech.edu 1075122031 19801 199.77.147.250 (26 Jan 2004 13:00:31 GMT)
X-Complaints-To: usenet@news-int2.gatech.edu
NNTP-Posting-Date: Mon, 26 Jan 2004 13:00:31 +0000 (UTC)
User-Agent: tin/1.4.2-20000205 ("Possession") (UNIX) (SunOS/5.7 (sun4u))