Any VPN software for the pro?

[scrosler]

Originally Posted by cforster

Not to get off topic, but yeah he is right. Anyone that knows anything about network security would tell you that is not a good idea, esp. with the default port of 5900.

No doubt! I dont even use the default ports at home. Not to mention VNC blows for security.

[apinkel]

I downloaded the anthavpn trial to see if it would work on my pro (which is not on their list of supported devices). It blows up with a wince501bexception error whenever I try to connect.

Has anyone found a vpn client for the TP that works with cisco vpns?

[mikeo1313]

Originally Posted by nrupalp

I use cisco vpn on desktop to vpn into my work and would like to know there is any software available that works with pro.

https://secure.logmein.com/labs/hamachi-0.0.3.1.cab I didn't test this but its worth a shot.

I'd also suggest if the router wasn't purchased with ssl vpn functionality its a dream to think just because newer routers do, yours would. If hamachi doesnt work nor any of the other suggestions I know there are people that got open source ssl vpn to work out, good enough for a couple users IMO, not a whole dept.

Originally Posted by scrosler

No doubt! I dont even use the default ports at home. Not to mention VNC blows for security.

If you want secure vnc, limit your realvnc server access to your hamachi ip. Really if your not allready getting sniffed or have a keylogger, 128-bit aes is good enough. It doesn't stop the highly motivated or skilled (not much does), but I'd doubt they'd use that avenue to start + guided from the subject, I'd say good enough sec.

[stretchs]

Originally Posted by mtbrain

Cisco does support the AnyConnect VPN for mobile devices according to their VPN compatibility reference guide “SSL VPN Clientless - You can access Clientless SSL VPN from your Pocket PC or other certified personal digital assistant (PDA). Neither the ASA administrator nor the Clientless SSL VPN user need do anything special to use Clientless SSL VPN with a certified mobile device.” http://www.cisco.com/en/US/docs/secu...y.html#wp75636

While they list that you do not need to do anything special to use the Clientless SSL VPN it does have to be setup on the firewall device to work. This is something I will be trying after the first of the year.

The only issue I found with this is for HTC devices you need to disable touchflo according to Cisco. Additionally the TP is not currently listed as a supported device from the following link: http://www.cisco.com/en/US/docs/secu....html#wp878382

I have not yet tried disabling Touchflo but will likely today.

[blkr00t]

Originally Posted by mtbrain

Cisco does support the AnyConnect VPN for mobile devices according to their VPN compatibility reference guide “SSL VPN Clientless - You can access Clientless SSL VPN from your Pocket PC or other certified personal digital assistant (PDA). Neither the ASA administrator nor the Clientless SSL VPN user need do anything special to use Clientless SSL VPN with a certified mobile device.” http://www.cisco.com/en/US/docs/secu...y.html#wp75636

While they list that you do not need to do anything special to use the Clientless SSL VPN it does have to be setup on the firewall device to work. This is something I will be trying after the first of the year.

I'm not sure about Cisco SSL VPN but I administer Juniper SSL VPN at my work and in order for ANY client to work, it must first pass my host checker settings. Host checker verifies that the host that is connecting to your network through vpn meets certain criteria, ie firewall running, anti-virus running and current...plus a host of other configurable things. This is very important because with a VPN, as anyone in IT knows you are essentially extending your perimeter to wherever that enduser is connecting from and providing them an encrypted tunnel. With SSL VPN, my policy is to be even more stringent in my security policy.

Just my $.02

[CozBoogie]

Moved to general Touch Pro Forum.

late,
Coz

[Shohan]

Maybe another solution to this. I used OpenVPN on my Mogul as well as configured an OpenVPN server on my DD-WRT flashed Bufallo router at home. I see no reason why this wouldn't still work with the Pro. I just don't know how compatible OpenVPN is with other VPN servers, but like I said this has worked for me from my Mogul as well as a laptop and it's SSL cert based.

[mikeo1313]

shohan: Dissimilar VPNs are definitely expected to not work with eachother, doesn't mean it isn't possible. Thing with original poster is hes tring to access a work resource which will in 99% of the cases, will need admin intevention, (to mAybe just see if something works), and may be reluctant to insist (for obvious reasons).

The cool thing about hamachi is you bypass nearly all security, filters & etc, he just has to leave it on. it doesn't matter if its a completely virtualized environment, as long as his os will allow creation of the nic hamachi creates and the *software* firewall on the DT (if there is one) trusts it.

[jmkendrick]

And in some companies, it's grounds for disciplinary action or termination to bypass computer security policies...just an FYI. If I caught someone doing this on a network I manage, I would make sure they definitely never even had a thought of doing it again.

[mikeo1313]

By all means, asking for (non-verbal->email) permission first is not an option to avoid risk of discredit.

Since it seems like it has to be mentioned, JIK, refrain from using words as "bypassing security" when you do so also.