UAB VPN Service.ppt

UAB VPN Service David Wolford, Communications Network Specialist UAB Virtual Private Network User Services has provided VPN for many years First service was called PopTop and used PPTP Second and current service uses a Cisco 3060 VPN concentrator and uses IPSEC We currently average ~ 50 IPSEC concurrent users System Information Current appliance is a Cisco 3060 which has been in service for approximately eight years. We are preparing two Cisco ASA 5550 security appliances to replace our 3060 in the near future. The Cisco ASA 5550’s will provide load sharing redundancy and will allow us to use the Cisco SSL client. Reasons to Upgrade Service Cisco 3060 was originally purchased for wireless users. It was pressed into service with the blocking of Microsoft ports and is now end-of-life by Cisco. Implementation of border firewall and plans of tighter border security will increase the need. Cisco is favoring SSL for newer OS platforms like Windows 64-bit. ASA5550 VPN Client Options Cisco IPSEC client IPSEC not available for 64 Bit Windows SSL Client Client Download SSL VPN Client Cisco IPSEC Client Departmental VPN Groups Offers IP addresses from a defined pool of addresses for firewall traversal and resource access DCNS can add or remove users from groups Works with SSL and IPSEC VPN Network Diagram Split Tunneling On the Horizon Integration with campus NAC Two factor authentication * * * * * * * * * * * * * * * * * * * * * * * * * *