SSi Service Strategies Inc.

IPSec VPN Client

 
Home
Up
Information Request
Evaluation Request
Site Contents
Contact SSi
Glossary of Terms
Site search
Notices

 

 

SSi

IPSec VPN Client

IPSec VPN Client Gives Secure Access to Corporate Network

There are two significant benefits to IPSec: enhanced security features and protocol interoperability. SonicWALL IPSec VPN Clients have all the mandatory components of the Internet Engineering Task Force (IETF) IP Security Standard (IPSec) for enhanced network security. The user can be certain that IP-based communications conform to the most secure and comprehensive standard for encryption, authentication, key management, and anti-replay services.

Custom-developed by SonicWALL, the IPSec VPN Client is specifically engineered to take advantage of the features and benefits of SonicWALL's fourth-generation Internet security appliances, adding greater value to SonicWALL's remote access solutions. The IPSec VPN Client uses innovative SonicWALL technology to deliver tighter integration for greater ease of use and manageability. Easy to install and simple to configure, the IPSec VPN Client utilizes 3DES or AES encryption to maintain the confidentiality of private data. Using SonicWALL's Client Policy Provisioning, the IPSec VPN Client streamlines VPN deployment and management by automatically downloading the VPN configuration data from the SonicWALL VPN gateway.

You should be aware that the IPSec VPN Client is intended to communicate with a SonicWALL appliance and requires an appliance for initial configuration and ongoing provisioning. We would suggest that you consider installing a SonicWALL as the gateway for the software clients. They are scalable and among the least expensive appliance based gateways on the market. The appliances support a wide range of access speeds from broadband VPN/firewall solutions for teleworkers to large-scale multiple T3-based access devices for large corporate networks.

Enforcement Features

The SonicWALL IPSec Client network security enforcement features enable strong privacy and user authentication.

bullet

Secure Remote Access.
The SonicWALL IPSec VPN Client provides mobile users with access to mission-critical network resources by establishing secure connections to their office network's IPSec-compliant SonicWALL VPN gateway.

bullet

Ease-of-Use.
The SonicWALL IPSec VPN Client provides users with easy-to-follow Installation and Configuration Wizards to quickly and easily install the product and configure a VPN client connection, streamlining VPN deployment and management.

bulletEasy User Interface.
The SonicWALL IPSec VPN Client offers point-and-click VPN activation and streamlined management tools to minimize support requirements.
bullet

Multi-Platform Client Support.
Allows secure, reliable client-initiated VPN connections from any computer running Microsoft Windows 98, Me, NT 4.0, 2000 or XP to provide maximum deployment flexibility.

bullet

ICSA-Certified IPSec VPN.
Ensures compatibility with other IPSec compliant firewall and VPN products, including SonicWALL's complete line of Internet security appliances.

bullet

NAT-Traversal Support.
Many networks use Network Address Translation (NAT) to connect multiple computers to broadband Internet connection using a single IP address. SonicWALL VPN Client increases secure network access flexibility by allowing IPSec VPN traffic to pass through (traverse) any IP network using NAT.

bullet

Simple Client Policy Provisioning.
SonicWALL's innovative technology enables the IPSec VPN Client to establish a connection after automatically downloading the VPN configuration data from the SonicWALL IPSec VPN gateway using only the IP address or domain name of the SonicWALL VPN gateway. This removes the burden from the remote user of setting up often complex VPN connections.

bullet

Flexible Certificate Support.
Supports Verisign, Entrust, Microsoft, and Netscape Certificate Authorities (CAs) for enhanced user authentication.

bullet

VPN Session Reliability.
Supports multiple VPN gateways to ensure mission-critical network access in case the primary gateway fails. IKE "keepalives" maintain the persistence of the VPN connections to eliminate time consuming session restarts.

bullet

Easy Multi-Client Deployment.
Using SonicWALL's Group VPN tunnel feature allows administrators to simplify the deployment of VPN Clients by distributing common configurations to all or subgroups of VPN Clients.

bullet

Tunneling to Multiple Gateways.
With the IPSec VPN Client, simultaneous VPN Client connections can be established to multiple SonicWALL VPN gateways.

bulletLow Cost of Ownership
bulletPreserves investments in existing network hardware, software, and experience by working with existing dial-up lines and network infrastructure.
bulletProvides significant network cost savings by ensuring secure communications and data privacy over public networks like the Internet.
bulletDelivers a breakthrough price/performance model for software encryption products.
bulletStandards Based
bulletEnsures information privacy using full 56-bit DES and 168-bit Triple DES (Data Encryption Standard).
bulletUses X.509 v.3 digital certificates.
bulletVerifies the sender's identity with Digital Signature Standard (DSS) and Secure Hash Algorithm (SHA) protocols.
bulletEstablishes and maintains secure communications using the IPSec mandatory Internet Security Association and Key Management Protocol (IKE).
bulletProvides encapsulated tunneling for integrity and confidentiality of IP packets, through the IP Encapsulating Security Payload (IPESP) tunneling mode protocol.

To learn more about SonicWALL's IPSec VPN capabilities, please visit our web site dedicated to VPN by clicking here.

 

  If you would like to request additional information on a subject or evaluate a product or service, please click on the appropriate button below.
   
 

 

 

Service Strategies Inc.

2392 Mount Vernon Rd

Dunwoody, GA 30338-3092

678-441-0020   800-662-1615

assist@ssimail.com
 

 

Copyright © 1998-2002 Service Strategies Inc. All rights reserved.
Revised: November 20, 2003.