Security Tools News & Tips » VPN

NSMXpress

Niranjan — Fri, 18 Sep 2009 18:32:42 +0000

Juniper Networks® NSMXpress is an appliance version of Juniper Networks Network and Security Manager (NSM). It simplifies the complexity of security device administration by providing a single integrated management interface that controls every device parameter. This robust hardware management system installs in minutes with full High Availability (HA) support, which also makes it easy to scale and deploy. Enterprise customers with limited resources can benefit significantly from NSMXpress. That is because it eliminates the need to have dedicated resources for maintaining a security management solution. NSMXpress makes it easy for administrators to control all aspects of Juniper Networks firewall/VPN, SA Series SSL VPN Appliances, IC Series Unified Access Control Appliances, J Series Services Routers, EX Series Ethernet Switches, and IDP Series Intrusion Detection and Prevention Appliances which include device configuration, network settings and security policy.

NSMXpress Homepage

Check Point Power-1 Appliances

Niranjan — Tue, 08 Sep 2009 20:24:26 +0000

Check Point Power-1 appliances enable organizations to maximize security in high-performance environments such as large campuses or data centers. They combine Check Point firewall, IPsec VPN, and intrusion prevention Software Blades with advanced acceleration and networking technologies that deliver a high-performance security platform for multi-Gbps environments.

Key Benefits

- Ensures availability of business-critical applications with up to 25 Gbps of firewall throughput and total system performance (Firewall + IPS) of up to 15 Gbps

- Field upgradeable for maximum performance flexibility (Power-1 11000 Series)

-Provides a comprehensive set of security Software Blades that is extensible on demand to include Web security, antivirus, anti-spyware, and anti-spam

- Simplifies administration with a single management console for all sites

- Protects against emerging threats with Software Blade update services

Check Point Power-1 Appliances Homepage

Cisco ASA 5500 Series Firewall

Niranjan — Fri, 04 Sep 2009 20:56:26 +0000

The Cisco ASA 5500 Series Adaptive Security Appliance is a modular platform that provides the next generation of security and VPN services for small and medium-sized business and enterprise applications. The comprehensive portfolio of services within the Cisco ASA 5500 Series enables customization for location-specific needs through its four tailored package product editions: the Firewall, VPN, IPS, and Content Security Editions.

These packages enable superior protection by providing the right services for the right location. At the same time, they enable standardization on the Cisco ASA 5500 Series platform to reduce costs in management, training, and sparing. Finally, each Edition simplifies design and deployment by providing pre-packaged location-specific security solutions.

Cisco ASA 5500 Series Firewall Homepage

Amazon Virtual Private Cloud (VPC)

Niranjan — Wed, 26 Aug 2009 21:43:20 +0000

Amazon has introduced a new service (limited beta) for it’s Elastic Compute Cloud (EC2) called Amazon Virtual Private Cloud (VPC). This is an excellent news for many enterprises who’re thinking of cloud but were worried about it’s security. This new service basically allows you to extend your existing IT Infrastructure to the cloud via secure IPSec tunnel.

Here’s all you need to do to get started:

1. Create a VPC. You define your VPC’s private IP address space, which can range from a /28 (16 IPs) up to a /18 (16,384 IPs). You can use any IPv4 address range, including Private Address Spaces identified in RFC 1918 and any other routable IP address block.
2. Partition your VPC’s IP address space into one or more subnets. Multiple subnets in a VPC are arranged in a star topology and enable you to create logically isolated collections of instances. You can create up to 20 Subnets per VPC (you can request more using this form). You can also use this form to request a VPC larger than a /18 or additional EC2 instances for use within your VPC.
3. Create a customer gateway to represent the device (typically a router or a software VPN appliance) anchoring the VPN connection from your network.
4. Create a VPN gateway to represent the AWS end of the VPN connection.
5. Attach the VPN gateway to your VPC.
6. Create a VPN connection between the VPN gateway and the customer gateway.
7. Launch EC2 instances within your VPC using an enhanced form of the Amazon EC2 RunInstances API call or the ec2-run-instances command to specify the VPC and the desired subnet.

SSL-Explorer

Niranjan — Mon, 30 Apr 2007 02:54:46 +0000

SSL-Explorer is the world’s first open-source, fully-featured, web-based SSL VPN server. This practicable remote access security solution includes SSL tunneling, intranet website proxying, access to multiple file systems and application launching/tunneling through a standard browser

Homepage

Screenshots

FortiGate SOHO & SMB

Niranjan — Wed, 21 Mar 2007 04:23:14 +0000

The FortiGate-50B, 60-series, 100A, 200A and 300A model Multi-Threat Security systems are the ultimate all-in-one, network-based solution to protect smaller deployments from blended threats. These easy-to-deploy and easy-to-administer systems deliver exceptional value and performance for small offices, home offices, small and medium sized businesses and branch office applications. With a complete complement of security services – including firewall, VPN, intrusion prevention, antivirus, web filtering, and traffic shaping – a wide range of organizations can now enjoy complete protection from the most damaging threats without penalties in performance, cost, or manageability. With models ranging in throughput from 30Mbps to 200Mbps, FortiGate-50B, 60-series, 100A, 200A and 300A can enable organizations to stay connected and protected against network-based threats. Sonicwall and Netscreen also offer all-in-one hardware firewalls for SMEs.

Homepage

ike-scan

Niranjan — Sun, 25 Feb 2007 02:25:16 +0000

The ike-scan tool scans IP addresses for VPN servers by sending a specially crafted IKE packet to each host within a network. Most hosts running IKE will respond, identifying their presence. The tool then remains silent and monitors retransmission packets. These retransmission responses are recorded, displayed and matched against a known set of VPN product fingerprints. It is available for Linux, Unix, MacOS and Windows under the GPL license.

Homepage

Juniper Networks SSL VPN – Secure Access

Niranjan — Sat, 24 Feb 2007 03:03:14 +0000

Juniper Networks Secure Access leads the SSL VPN market with a complete range of remote access appliances. Juniper Networks SSL VPN products have a variety of form factors and features that can be combined to meet the needs of companies of all sizes, from SMBs that need access for remote/mobile employees to large global deployments that need to provide remote and/or extranet access, for employees, partners, and customers from a single platform. Juniper Networks SSL VPNs are based on the Instant Virtual Extranet (IVE) platform, which uses SSL, the security protocol found in all standard Web browsers. The use of SSL eliminates the need for client-software deployment, changes to internal servers, and costly ongoing maintenance and desktop support.

Homepage

Astaro Security Gateway

Niranjan — Sun, 07 Jan 2007 07:51:50 +0000

Astaro Security Gateway Appliances combine ease-of-use with complete network protection. It’s an UTM (Unified Threat Management) device, with tightly integrated Firewall, IPS, and VPN, which offers web filtering and email filtering from viruses, spam, and phishing attacks. Network security applications can be managed from one location using one intuitive browser-based user interface. Astaro Security Gateway appliances run Astaro Security Gateway Software (formerly Astaro Security Linux). You can request a demo unit of the appliance if you want an out-of-the box solution, or download the Astaro Security Gateway Software if you want to install it in your own hardware.

Appliances Page

Software Page

Homepage

Netscreen

Niranjan — Sat, 06 Jan 2007 09:40:04 +0000

Netscreen series integrated devices incorporating a firewall, IPSec VPN capabilities, and denial of service mitigation, with Unified Threat Management (UTM) security features including Stateful firewall, IPS, Antivirus, Anti-Spyware, Anti-Phishing, Anti-Adware, Anti-Spam, and Web Filtering to protect the network from attack. I’ve installed and manage a lot of Netscreen firewalls. They’re excellent UTM device but if you’re looking for a cheaper option, then Sonicwall also can do the job.

Homepage