|
Subject: |
Re: Comments solicited on dial-in security devices |
|
From: |
(Andrew Macpherson) Postmaster <A .
Macpherson @
bnr .
co .
uk> |
|
Date: |
Thu, 04 Nov 93 22:33:26 +0000 |
|
To: |
"Michael C. McCune" <mccune @
nic .
cerf .
net> |
|
Cc: |
firewalls @
GreatCircle .
COM |
|
In-reply-to: |
Message from "Michael C. McCune" on Thu, 04 Nov 93 13:58:03 -0800. |
|
Organisation: |
BNR Europe, HARLOW, Essex CM17 9NA, GB |
|
Phone: |
+44 279 402423 (fax; +44 279 403030) |
SecurID has integrated with the Caymen Gatorlink for Apple-Talk remote, and the
same card can be used to secure access to your Internet firewall. I've had
trouble with them in respect of multi-homed hosts (enable users for all
``hosts'', and a pain if the server is multi-homed) and the Apple-talk remote
client can't currently do some of the things needed (set pin, resynchronise
card) but thats "fixed in the next release". There are also issues wrt
multiple administrators each with their own set of cards, and restricting
access to that set. I understand there's also Annexe terminal server
support. The operating model is call up, be authenticated and pass
through. For us the benefits outwiegh the problems.
In a more general context you may wish to consider which
dial-back/authenticated pass-through systems have seperate modems for
incoming/outgoing, whether there is a generalised switch between the
modem-rack and the services you wish to provide, or the more common 1 modem
per service entry point.
Look at the LeeMah Multi-Traq 800-992-0020 (CA 800-824-9369). Limited to
19200 bps, but a nice system for any-modem, any service on a per user
configuration basis.
|
|
