Article

REVIEW: Corrent VPN 'connects' with Check Point software

Mike Chapple, Enterprise Compliance

Corrent's SR110 SSL VPN Web Security Gateway with Check Point Connectra 2.0
Corrent
Price: Starts at $11,700 for hardware and software license

Corrent's SR110 SSL VPN Web Security Gateway, an appliance running Check Point Software Technologies'

    Requires Free Membership to View

Connectra 2.0 SSL VPN software, offers easy administration, an intuitive client experience and strong security. However, the SR110 is priced in the upper tier of VPN appliances.

The Connectra software provides point-and-click administration through a well-designed Web interface. User authentication may be managed through the internal Connectra user database, but enterprises will prefer to integrate with LDAP, RADIUS and SecurID systems for authentication and authorization. We used Connec- tra's LDAP interface to perform authentication against Active Directory.

The Web-based process for adding applications is straightforward. For example, to add a Web application, we simply specified the name and location of the application and the desired protection level (a combination of allowable authentication techniques and caching status). The SSL Network Extender ActiveX control, a Connectra Web plug-in, allows the use of any network-based Windows application. It tunnels endpoint traffic over SSL. We used the SR110 to access a Windows Server 2003 file server, an Ex-change 2000 Web Outlook server, an IMAP server (using the Connectra integrated client) and several Web-enabled apps.

Clients are presented with the Connectra portal, which provides a consolidated view of authorized apps.

Connectra leverages Check Point's experience in perimeter security by integrating the Smart-Defense network and application security controls. Network security controls include protection against DoS attacks (such as Teardrop and LAND), TCP/IP protocol-based attacks and network probes; application controls include inspection of HTTP and FTP traffic. The controls stopped several of our URL-based attacks, as well as a SQL injection attack against a Web-based form.

Executive Summary

Pluses: Easy installation; Broad application support; Strong security

Minuses: No Firefox support;

Expensive

The wizard-based installation was smooth, taking about an hour from opening the box to establishing client connections. The installation guide provides detailed instructions for a variety of network configurations, including template firewall rules necessary for installing the appliance in a DMZ. The SR110 has six Ethernet ports, two of which support Gigabit Ethernet.

We were disappointed with Connectra's lack of Fire-fox client browser support, but Web portal access is available through IE, Mozilla, Netscape and Safari. SSL Network Extender functionality is limited to IE on Windows 2000/XP.

The SR110's steep price may discourage some enterprises. The $3,700 cost of Corrent's appliance combined with the $8,000 cost of a 50-user Connectra license from Check Point (which increases to $30,000 for 250 users) makes the price tag soar far above some established competitive products. For example, a Cisco VPN 3005 concentrator (which supports 50 SSL VPN sessions) lists at $2,995, and $35,000 will purchase a Cisco VPN 3060, which supports 500 clientless Web sessions.

Price notwithstanding, an appliance that incorporates ease of use for admins and users and strong security offered by Connectra merits consideration for secure access to enterprise applications.

This product review originally appears in the July 2005 issue of Information Security magazine.


There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: