Remote Access

Most common servers/protocols.

• L2TP IPsec.

  • IKE+ISAKMP+L2TP.

• OpenVPN.

  • SSL.

• Proprietary.

  • SSL or IPSec based.

Authentication

• Types.

  • Pre-shared.

  • RADIUS/LDAP.

  • RSA with embedded CA.

  • RSA with external CA.

• Certificates/Credentials must be distributed securely.

  • Web services, SSH, ...

Server

• Deployed in Firewalls.

• In DMZ.

  • Traffic is routed back to the same zone.

• Traffic is routed back to the firewall using a different network interface and zone.

• Traffic is routed directly to the private zone.

  • Breaks the zone concept.