Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
In a VPN 3000 Concentrator config, what are the ramifications of an unauthorised user knowing the group username and password?I have a situation where a proposed solution has a single group defined, which all users are part of. The group username and...
By using certificates, you have the advantage of revoking the cert should a laptop be lost/stolen (as you suggest) and not compromise the entire solution. I don't think the security is the same as group password - the private certificate would be pro...
As per RFC 2048, Section 1.5.3:1.5.3 ISAKMP Requirements Strong authentication MUST be provided on ISAKMP exchanges. Without being able to authenticate the entity at the other end, the Security Association (SA) and session key established are ...
