[123458] in North American Network Operators' Group
RE: Best VPN Appliance
daemon@ATHENA.MIT.EDU (Voll, Toivo)
Tue Mar 9 13:04:03 2010
From: "Voll, Toivo" <toivo@usf.edu>
To: "sfouant@shortestpathfirst.net" <sfouant@shortestpathfirst.net>, Chris
Campbell <Chris.Campbell@nebulassolutions.com>, Dawood Iqbal
<Dawood_Iqbal@hotmail.com>
Date: Tue, 9 Mar 2010 13:03:36 -0500
In-Reply-To: <1265797326-1268076585-cardhu_decombobulator_blackberry.rim.net-2008957556-@bda294.bisx.prod.on.blackberry>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
You are correct; I should have been more pedantic -- the SA series cannot t=
erminate site-to-site IPsec tunnels, according to the sales engineer, unlik=
e the Cisco 3000 series and ASA.
--
Toivo Voll
University of South Florida
Information Technology Communications
-----Original Message-----
From: Stefan Fouant [mailto:sfouant@shortestpathfirst.net]=20
Sent: Monday, March 08, 2010 2:29 PM
To: Voll, Toivo; Chris Campbell; Dawood Iqbal
Cc: nanog@nanog.org
Subject: Re: Best VPN Appliance
Toivo,
The SA Series absolutely supports IPsec if you are using Network Connect. =
It defaults to using IPsec and if that is not supported then it will fall b=
ack to SSL. Of course, NC is not as secure as W-SAM, J-SAM, or Core Access=
in terms of role and resource granularity control but the support for IPse=
c is absolutely there.
