Corrent's SR110 SSL VPN Web Security Gateway with Check Point Connectra 2.0
Corrent
Price: Starts at $11,700 for hardware and software license
Requires Free Membership to View
SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!
Michael S. Mimoso, Editorial Director
 |
|
|
|
|||
|
|
|
|
|||
|
|
Corrent's SR110 SSL VPN Web Security Gateway with Check Point Connectra 2.0 | |
|||
|
|
|
|
|||
|
||||||
|
|
|
|
|||
|
|
||||||
|
||||||
|
|
|
|
|||
|
||||||
|
||||||
Corrent's SR110 SSL VPN Web Security Gateway, an appliance running Check Point Software Technologies' Connectra 2.0 SSL VPN software, offers easy administration, an intuitive client experience and strong security. However, the SR110 is priced in the upper tier of VPN appliances.
The Connectra software provides point-and-click administration through a well-designed Web interface. User authentication may be managed through the internal Connectra user database, but enterprises will prefer to integrate with LDAP, RADIUS and SecurID systems for authentication and authorization. We used Connec- tra's LDAP interface to perform authentication against Active Directory.
The Web-based process for adding applications is straightforward. For example, to add a Web application, we simply specified the name and location of the application and the desired protection level (a combination of allowable authentication techniques and caching status). The SSL Network Extender ActiveX control, a Connectra Web plug-in, allows the use of any network-based Windows application. It tunnels endpoint traffic over SSL. We used the SR110 to access a Windows Server 2003 file server, an Ex-change 2000 Web Outlook server, an IMAP server (using the Connectra integrated client) and several Web-enabled apps.
Clients are presented with the Connectra portal, which provides a consolidated view of authorized apps.
Connectra leverages Check Point's experience in perimeter security by integrating the Smart-Defense network and application security controls. Network security controls include protection against DoS attacks (such as Teardrop and LAND), TCP/IP protocol-based attacks and network probes; application controls include inspection of HTTP and FTP traffic. The controls stopped several of our URL-based attacks, as well as a SQL injection attack against a Web-based form.
The wizard-based installation was smooth, taking about an hour from opening the box to establishing client connections. The installation guide provides detailed instructions for a variety of network configurations, including template firewall rules necessary for installing the appliance in a DMZ. The SR110 has six Ethernet ports, two of which support Gigabit Ethernet.
We were disappointed with Connectra's lack of Fire-fox client browser support, but Web portal access is available through IE, Mozilla, Netscape and Safari. SSL Network Extender functionality is limited to IE on Windows 2000/XP.
This was first published in June 2005