James
You're running the box with a lower rev of the bootmgr than the default image. This invariably causes problems on IPSO because you end up loading different driver versions for the hardware and the box panics. You have a few options:
1: RMA the sucker if you've got Nokia support.
2: As...
Apologies for the earlier causticity - what you need is a solution, I guess.
Both Netscreen and Checkpoint gateways support L2TP over IPSec, so you could ditch both clients and just use the integral W2K/XP VPN client to connect to either firewall, assuming that the admins of the latter are...
Think...
Both clients are binding to IKE, ESP and NAT-T, (plus their proprietary NAT-avoidance ports) so how can you expect them both to work at the same time? Compare it to Apache and IIS on the same box listening on port 80 - what happens?
802.1x
Most switches support it these days, and if the client can't authenticate it can't get onto the network. If you have a W2K3 domain environment you can use group policy to force the devices to enroll for a certificate when they connect to a trusted switch, then use that cert for...
The point of the Groups in an ACE/Server database is exactly what you want to achieve, i.e. don't leave all agent hosts (NAS) open to 'All users' but only allow each agent to authenticate a particular group, then put the relevant users into each group.
As far as the +1600 users, try using the...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.