VPNC logo
VPNC members | VPN technologies | Mailing list | Join VPNC
Interoperability testing | Documentation profiles | SimpleCA
VPN standards | IPsec archives | Features chart | VPN white papers
VPN conferences | IPsec bakeoff | Definitions | HIPAA | VPNC home

VPNC Update for May, 2004

Welcome to the latest issue of the VPNC Update. We hope you find the news in this issue valuable.

VPNC News

VPNC Adds Secure Remote Access to List of Supported VPN Technologies

Users' definitions of a virtual private network change over time, usually encompassing new technologies that allow private access to network resources. In the early days, a VPN consisted of a trusted network over a non-IP backbone. Later, trusted VPNs expanded to IP backbones. With the advent of IPsec, VPNs expanded to include systems that use strong encryption over the public Internet.

IPsec is, of course, not the only technology that uses strong encryption to protect Internet-based traffic. SSL and its newer embodiment, TLS, have long been used to protect shoppers on the web. In the past few years, many vendors (including some of VPNC's current members) have extended the use of SSL into the VPN arena by making it a viable alternative for secure remote access to corporate networks.

Of course, IPsec is already commonly used for secure remote access. However, IPsec for secure remote access typically requires software installation on the remote users' computers as well as a fair amount of management by the VPN administrator. Secure remote access with SSL, on the other hand, requires no (or sometimes a little) new software on remote users' computers and significantly less management at the corporate site. Although sometimes less convenient, the major advantage of IPsec is that remote users can have true access to the corporate network, whereas remote access with SSL limits users to particular individual programs on a small number of servers. Thus, some users will prefer one technology over another when faced with the problems of making networked resources available securely to remote users.

Because an ever-growing number of customers see the secure remote access over SSL market as part of the overall VPN market, VPNC will expand its list of VPN technologies. In the coming months, we will update our popular VPN Technologies: Definitions and Requirements document to say exactly where remote access over SSL is and is not a VPN technology, and will add remote access SSL features to our VPNC members features chart. Of course, as we add new members to the consortium, we will welcome vendors who specialize in VPNs for remote access over SSL to our growing list of members who offer trusted, secure, and hybrid VPNs. Stay tuned for more announcements in this area!

VPNC Testing News

VPNC testing logo

This month, one product received the logo for AES Interoperability:

See the VPNC testing page for full lists of all the VPNC members' products which have proven interoperability and conformance.


Recent VPNC Member Press Releases

See the VPNC member list for a complete list of VPNC members.

ADTRAN
ADTRAN Ethernet Switches Complete WAN-to-the-Desktop Solution; New NetVanta Product Line Provides Managed Layer 2 Connectivity

ADTRAN
ADTRAN All-In-One Network Access Solution Redefines Branch Office Connectivity

Check Point Software
Check Point Positioned in the Leader Quadrant in Gartner Firewall Report

Check Point Software
Check Point Software's InterSpect Named "Hot Pick" by Information Security Magazine

Cisco
Cisco Systems Completes Acquisition of Twingo Systems

Cisco
Bharti Infotel and Cisco Systems to Empower Enterprise Networks

CyberGuard
CyberGuard Wins SC Award For Best Firewall For Third Year Running

Encore Networks
Dynavar Networking Selects Encore Networks To Bridge Legacy Networks To IP

Inkra
COMDEPOT Enhances Managed Service Delivery With Inkra Networks Virtual Service Switch

Inkra
Egenera, Inkra And 3PAR Power SAVVIS Virtualized Services Delivery Platform

Juniper Networks
Juniper Networks Positioned in the Leader Quadrant in Enterprise Firewall Magic Quadrant

Juniper Networks
NetScreen Raises the Bar with Next-Generation Integrated Network Security Platform

NETGEAR
NETGEAR Launches Industry's First VPN Wizard Designed For Small to Medium Businesses

Nokia
Nokia TETRA to serve France's largest airports

Nokia
UK's National Health Service prescriptions body chooses Nokia to secure web transactions and cut costs of remote access

SafeNet
Indonesia Government Selects SafeNet's SafeEnterprise Security System to Add Vital Security for Taxpayers

SafeNet
SafeNet To Demonstrate SafeEnterprise Security Management Center At DISA Partnership Conference

ServGate
ServGate Secures Southern California's Journey Electrical Technologies

ServGate
ServGate Expands Operations to South America with Premier Distributor Pranha 50 for Linux-based EdgeForce Platform

Stonesoft
StoneGate Firewall/VPN appliance achieves a world first in Checkmark Firewall Certification to Level 1, Level 2 and VPN


VPN Standards News

Users of secure and hybrid VPNs often need to know more about cryptography than they would prefer to. One particularly difficult area of IPsec is deciding which Diffie-Hellman group is appropriate for use with tunnels that use TripleDES or AES-128 encryption. The same information is needed for determining the size of RSA encryption keys used with secure remote access over SSL. A new Best Current Practices RFC, Determining Strengths For Public Keys Used For Exchanging Symmetric Keys (RFC 3766) describes how to pick Diffie-Hellman key sizes. The document, co-authored by Hilarie Orman and VPNC's director Paul Hoffman, explains the cost of picking too small of a key size (too easy to defeat) and the cost of picking too large of a key size (takes too long to use), and gives real-world calculations using recent attacks.


Featured VPNC Member White Paper

One of the more popular features on VPNC's web site is our extensive list of white papers from our members. These cover a range of topics from VPN basics to cryptography. As interesting new white papers appear, we will list them in the VPNC Update.

Secure NCP Bypass Solutions Over Satellite And Terrestrial Networks from Encore Networks describes how to covert legacy networking protocols, particularly SDLC, to IP in both trusted and secure VPNs. As much as many of us would like to think that the world has converted to IP-based networking, there are still many sites that use old and often proprietary methods. This paper gives many examples of how older networks can be encapsulated in VPNs, even over satellite links.


Upcoming VPN-related Events

Networld+Interop Spring
Las Vegas, NV / May 9-14, 2004
Probably the largest networking show in the world, this conference has a sizable show floor for vendors and a large, fast-paced educational track. Because of the large attendance, many VPNC members regularly exhibit at N+I. VPNC's director, Paul Hoffman, will be speaking about VPN technologies at the session titled "What VPN? Choosing the Right Technology To Fit Your Requirements".

MPLScon 2004
New York / May 24-27, 2004
The trusted VPN industry mostly revolves around MPLS, and MPLScon is by far the most important event for the MPLS market. The conference has a strong educational component, as well as a large exhibit space. VPNC's director, Paul Hoffman, will be chairing the MPLS VPNs and MPLS security sessions.


About This Mailing List

The VPNC Update is a low-volume, one-way mailing list to inform people about news in the VPN industry. Subscription is open to all, members and non-members. If you have questions about the content of VPNC Update, or suggestions or information for future issues, please send them to Paul Hoffman, VPNC's director.

To subscribe to this mailing list, send a message to
   vpnc-update-request@vpnc.org
with the single word
     subscribe
in the body of the message. To unsubscribe, send a message to
   vpnc-update-request@vpnc.org
with the single word
     unsubscribe
in the body of the message.