VPN advice

[Laurent Hebert]

In a site to site configuration, you should not have any problem to have an
NT PC in one network communicating to an NT Server on the other network if
these two networks are interconnected via a pair of VPN Gateways.  On our
side, we have tested the ADI product and it works fine in this mode.  The
problem is more in a Client to Site with the client being an NT PC.  So
far, we have not found any VPN client on NT PC that work transparently
(i.e. executing the NT login script).

Concerning the management question, please refer to the Network Computing
dated Sept. 20.  They have made a VPN product comparaison that can help you
select what you need.

Laurent Hébert
Network Consultant, 
Netesys
----------
> De : Haber, David J. <David.Haber at vtmednet.org>
> A : 'vpn at listserv.secnetgroup.com'
> Objet : VPN advice
> Date : 19 octobre, 1999 17:55
> 
> We are in the evaluation and testing phase of our VPN deployment and
would
> like some advice about a few issues we have come up with. We have a
> LAN-to-LAN situation--users on one network need to connect back securely
to
> an NT domain on another network. The two networks are connected by
routers
> and security is maintained through access lists.(We have a PIX firewall
> protecting the rest of our network.)
> First, a key feature that we are looking for is a VPN product that will
> allow us to do an NT logon and download our NT profiles. Microsoft's PPTP
> allowed user's to establish the tunnel and logon to an NT Domain
> directly--but it didn't work very well. Does anyone know of a product
that
> will allow this? We have tested one product and it only let us establish
the
> tunnel.  We need a separate logon to connect to the NT domain--we use
Citrix
> Terminal Server.
> Second, what products have the best management capabilities, i.e,
> documentation, ease of configuration, troubleshooting tools, connection
> monitoring, etc.
> Any help you can give us would be greatly appreciated. Thanks.
> 
> David 
> 
> ****************************************************************
> TO POST A MESSAGE on this list, send it to vpn at listserv.secnetgroup.com
> 
> The VPN FAQ (under construction) is available at
> http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html
> 
> We are currently experiencing "unsubscribe" difficulties.  If you
> wish to unsubscribe, please send a message containing the single line
> "unsubscribe vpn your-e-mail-address" to
owner-vpn at listserv.secnetgroup.com
> 
> ****************************************************************

****************************************************************
TO POST A MESSAGE on this list, send it to vpn at listserv.secnetgroup.com

The VPN FAQ (under construction) is available at
http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html

We are currently experiencing "unsubscribe" difficulties.  If you
wish to unsubscribe, please send a message containing the single line
"unsubscribe vpn your-e-mail-address" to owner-vpn at listserv.secnetgroup.com

****************************************************************