Authentication with Firewall-1 NG with AI

Thread View: comp.security.firewalls

4 messages

[T] Back to Threads [V] Tree View [G] Group Articles

4 total messages Started by MichaelK Sun, 25 Jan 2004 19:02

#381

Author: MichaelK
Date: Sun, 25 Jan 2004 19:02

7 lines
1264 bytes

Seems that S/Key authentication has been removed from the latest version
of Firewall-1 (NG with Application Intelligence R55).
We have lots of Linux and MacOSX users, SecuRemote only seems to be available
for Window$.  Found SecuRemote to be very flakey software on Windows anyway.
So how are people meant to authenticate securely.

Michael

Re: Authentication with Firewall-1 NG with AI

#382

Author: Beoweolf
Date: Mon, 26 Jan 2004 02:49

25 lines
2268 bytes

There are 5 valid remaining  authentication schemes.

OS password...use LDAP for Windows or Novell  authentication
VPN-1/Firewall-1
Secure ID
TACACS
RADIUS server

"MichaelK" <m_keightley@yahoo.co.uk> wrote in message
news:bdf31434.0401251102.69b77a54@posting.google.com...
> Seems that S/Key authentication has been removed from the latest version
> of Firewall-1 (NG with Application Intelligence R55).
> We have lots of Linux and MacOSX users, SecuRemote only seems to be
available
> for Window$.  Found SecuRemote to be very flakey software on Windows
anyway.
> So how are people meant to authenticate securely.
>
> Michael


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.564 / Virus Database: 356 - Release Date: 1/19/2004

Re: Authentication with Firewall-1 NG with AI

#383

Author: Jason Kau
Date: Mon, 26 Jan 2004 13:00

23 lines
2190 bytes

MichaelK <m_keightley@yahoo.co.uk> wrote:
> Seems that S/Key authentication has been removed from the latest version
> of Firewall-1 (NG with Application Intelligence R55).
> We have lots of Linux and MacOSX users, SecuRemote only seems to be available
> for Window$. 

SecuRemote NG is available for Redhat 7.2 and 7.3--not sure if it will work 
with later versions of RedHat.  You should be able to get FreeS/WAN to work
with VPN-1.  As for MacOS X, you can use third-party VPN clients like 
VaporSec or Equinux VPN Tracker.

> Found SecuRemote to be very flakey software on Windows anyway.

SecuRemote NG FP3 Build 53515 has worked great for us on Win2K/XP.

> So how are people meant to authenticate securely.

RSA SecurID or any other time-synchronization tokens that can be accessed via
RADIUS/TACACS, e.g. Vasco?  Client certificates (Entrust or internal CA)?

-- 
Jason Kau
http://www.cnd.gatech.edu/~jkau

Re: Authentication with Firewall-1 NG with AI

#384

Author: Dan
Date: Wed, 28 Jan 2004 22:32

36 lines
2888 bytes

Does anyone no when checkpoint expects to provide client authentication for
ssh as well as telnet, ftp, http and https, and rlogin?

Thanks.



"Jason Kau" <jkau@vulture.cnd.gatech.edu> wrote in message
news:bv331f$jap$1@news-int2.gatech.edu...
> MichaelK <m_keightley@yahoo.co.uk> wrote:
> > Seems that S/Key authentication has been removed from the latest version
> > of Firewall-1 (NG with Application Intelligence R55).
> > We have lots of Linux and MacOSX users, SecuRemote only seems to be
available
> > for Window$.
>
> SecuRemote NG is available for Redhat 7.2 and 7.3--not sure if it will
work
> with later versions of RedHat.  You should be able to get FreeS/WAN to
work
> with VPN-1.  As for MacOS X, you can use third-party VPN clients like
> VaporSec or Equinux VPN Tracker.
>
> > Found SecuRemote to be very flakey software on Windows anyway.
>
> SecuRemote NG FP3 Build 53515 has worked great for us on Win2K/XP.
>
> > So how are people meant to authenticate securely.
>
> RSA SecurID or any other time-synchronization tokens that can be accessed
via
> RADIUS/TACACS, e.g. Vasco?  Client certificates (Entrust or internal CA)?
>
> -- 
> Jason Kau
> http://www.cnd.gatech.edu/~jkau

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads