[c-nsp] What does SSL VPN Devices offer?

[A.L.M.Buxey at lboro.ac.uk]

Hi,

> If it's a random Internet-café PC, do you really trust that there's no
> keylogger already installed?  Regardless of how secure the network
> connection has become, it doesn't help if you're sniffing at source.

this is where one-time passwords are required. supplied via either a keyfob
system (RSA style) or , for example, an SMS message. 

> The big win for SSL VPN, as far as I can see from investigation so far, is
> that it gets you round the numerous ISPs and corporate networks you might be
> visiting who block some combination of ESP, AH and ISAKMP.  The former in an

yep. thats the big one.

alan