Discussion on:
View:
Show:
Knowing what we know about the insecurity of ssl and how it can be breached, how secure is this connection? And what is the advantage of adding so much more burden to this system? Is it such a monster that it can efficiently handle the firewall, communication, etc? Does this not open up further possibilities to that already porous IE browser? Will it work with all other browsers?
SSL VPN has it's pros and cons. Security, as always, is definetly something you want to look at!
Here is a link you may find helpful.
http://www.cisco.com/web/about/security/intelligence/05_08_SSL-VPN-Security.html
Consider all factors before deciding which VPN solution is the 'right one'.
Here is a link you may find helpful.
http://www.cisco.com/web/about/security/intelligence/05_08_SSL-VPN-Security.html
Consider all factors before deciding which VPN solution is the 'right one'.
I'm surprised the article makes no mention of the weaknesses surrounding RC4 and MD5. You can disable these two algorithms in ASDM by selecting Configuration -> Device Management -> Advanced -> SSL Settings.
And naturally you'll want to make sure any Certificates used by the ASA were not signed using MD5 as the hash.
And naturally you'll want to make sure any Certificates used by the ASA were not signed using MD5 as the hash.
Some of the CLI switches were lost to advertising due to a frame just a bit too narrow.
How can I get a complete listing?
How can I get a complete listing?
It currently doesn't work with IE 7
It did work great with FireFox 2.x however its kind of unstable with F 3.x
Big Bennie the VPN Client doesn't work on Vista 64 but this does.
It did work great with FireFox 2.x however its kind of unstable with F 3.x
Big Bennie the VPN Client doesn't work on Vista 64 but this does.
I was a bit surprised to see "the ASA does not permit communication with sites that have invalid certificates." Does that mean if an internal web server has a self-signed cert, then the ASA will not allow the client to access it?
One of the major benefits of Clientless SSL VPN is it lessens the need for an internal CA and Certs for each service. So I don't understand why the ASA would be so strict about this.
One of the major benefits of Clientless SSL VPN is it lessens the need for an internal CA and Certs for each service. So I don't understand why the ASA would be so strict about this.
- Keyboard Shortcuts:
- Prev
- Next
- Toggle
