Netscreen-Remote/firewall

[dgh2000]

Hello,

I have several laptops that use Netscreen-Remote to connect to Netscreen 100 for VPN. Laptops are starting to use hotel LAN and WIFI areas to connect. I am concerned since I currently don't have firewall protection on the laptops. What do you use or suggest to use for local laptop firewall to protect it (and thus my network). Laptops are running Win 2K and >7 NR but not all current version of NR

Dave

 

[penauroth]

You have to be very careful with using firewall software with NS Remote. I and many others have noticed a severe problem between the virtual adapter provided by SafeNet and firewall software. When the firewall is enabled the virtual adapter will not load. I have experienced this with McAfee Personal Firewall and Win XP Pro's built in firewall. This is especially the case with the current version and earlier versions of NS Remote.

It appears you are in a pickel however, all is not lost. I would have the users disable NetBIOS over IP so that way their computer name cannot be resolved to an IP address - one of the first things a hacker checks on a network. In addition, disabling the messenger service might help as well. Also, you can configure the local policies on the laptop machine to disallow users to connect to the machine on the network remotely. Lastly, turn-off shares and disable WBEM services. A little complexity in passwords and shutting down common SNMP ports can help.

That is the best I can do for you. Most firewall software prevent access to certain services and ports. All configurable through their software. Anyway, good luck.


Paul

 

[dgh2000]

Thanks! It gives things for me to start with for sure.

Have you ever used the Netscreen Remote Security Client? Missed it on their website earlier- seems to have a client firewall from Sygate. They are of course recommending it for client firewall and capatibility with Netscreen-Remote. It looks like it is sold as a separate product but is basically the VPN Netscreen-Remote + client firewall.

Dave

 

[penauroth]

Yeah, I've seen it but I didn't venture to buy it because we already had McAfee 6.0 with Firewall for all our machines. To acquire additional firewall protection would be hard to justify to my boss.

Well, good luck. You might think about purchasing a few copies of the VPN/Firewall NS Remote for the several mobile clients you do have. It my save you a lot of headaches and work. Good luck.

Paul