I just want to say i really appreciate the help and the forum is great.
Quick background,
-Client is running a SQL database that clients outside the WAN need access through. The clients are using broadband cards on Motion LE1700 tablet PC's.
-There is a dedicated production SQL server, either windows or Linux based. Currently running MySQL on a Windows 2000 advanced server box.
When i use to do this type of VPN traffic i used a old PIX 5500 which i guess they dont make anymore.
-I talked to cisco and it looks like the ASA 5510 looks to be about right for the cost.
-Client has two static IP's
The clients only need access to the MySQL server, what would be the best VPN solution.
Im thinking SSL VPN, but im not 100% sure on the configuration.
From what ive understood, i can dictate what resources the clients that have authenticated through SSL VPN / SSL enabled browser can access. This sounds great, cause they dont need, and i dont want, them to have complete access to the network.
I also like the fact we dont need any other software like the IPsec solution.
I understand the SSL CALs from cisco, so those will need to be purchased.
Is there anything i am missing or is it as easy as that, specify the resources available and user list.
Clients then hit some ssl enabled website to authenticate.
They can then start there custom java app to access the mysql resources??
Thanks for the help,
Quick background,
-Client is running a SQL database that clients outside the WAN need access through. The clients are using broadband cards on Motion LE1700 tablet PC's.
-There is a dedicated production SQL server, either windows or Linux based. Currently running MySQL on a Windows 2000 advanced server box.
When i use to do this type of VPN traffic i used a old PIX 5500 which i guess they dont make anymore.
-I talked to cisco and it looks like the ASA 5510 looks to be about right for the cost.
-Client has two static IP's
The clients only need access to the MySQL server, what would be the best VPN solution.
Im thinking SSL VPN, but im not 100% sure on the configuration.
From what ive understood, i can dictate what resources the clients that have authenticated through SSL VPN / SSL enabled browser can access. This sounds great, cause they dont need, and i dont want, them to have complete access to the network.
I also like the fact we dont need any other software like the IPsec solution.
I understand the SSL CALs from cisco, so those will need to be purchased.
Is there anything i am missing or is it as easy as that, specify the resources available and user list.
Clients then hit some ssl enabled website to authenticate.
They can then start there custom java app to access the mysql resources??
Thanks for the help,