[c-nsp] VPN Solutions

[Nauwelaerts, Nick (CM Belgium)]

> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Lawrence Wong
> Sent: Tuesday, November 30, 2004 5:41 AM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] VPN Solutions
> 
> Hi all,
> 
> I am tasked to implement a small (~50 users) remote
> access cum site to site VPN for my company.
> 
> I was looking around and came across the Cisco PIX,
> Cisco VPN 3000, Netscreen Firewall and others.
> 
> Does anyone have experience in these or any other
> suggestions? Any idea how is the licensing like for
> VPN solutions? Is it based on per installed client
> software or unlimited as long as the VPN server is
> licensed?

I've just been testing a vpn concentrator 3020 for a week to replace a
checkpoint based enduser vpn. So far I've been fairly happy with it. It
did take some time to get PKI and active directory authentication going
but once it's running it runs great.  LDAP seems a bit harder to get
going but that isn't a requirement for us at this time.
Our site to site tunnels will keep running on checkpoint however.

Enduser licenses for all cisco vpn 3000 series are unlimited, for an
overview you can go here:
http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2284/prod_mode
ls_comparison.html

Even though the website says 1 available expansion slot my unit has 3
available. I haven't found anything about if they will actually work or
not. Redundant PSU is an option as well.

// nick