I agree with Reinhard. RADIUS is still going to be single-factor, and
sounds like those connectivity problems are not related to certs (I see it a
lot with user/pass and Radius, too) or authentication.
Apples to apples, you should compare certificates to RSA SecurID.
Neil Delacruz
On 1/14/06, Reinhard Stich <r.stich AT internet-security DOT at> wrote:
>
> hi,
>
> certivicates are more secure than username/password authentication
> (that you have with radius).
>
> if you have connection problems with your client-VPN I don't think
> this is related to the authentication method.
>
> cheers
> reinhard
>
> At 18:06 14.01.2006, you wrote:
> >Hello Gurus,
> >
> >
> >
> >Has anyone compared the Checkpoint VPN authentication schemes? Which one
> is
> >better the RADIUS or using Checkpoint VPN Certificate? I'd like to
> compare
> >the reliability of those schemes. Currently my company is using the VPN
> >certificate scheme, but it seems that the authentication fails
> frequently.
> >The errors are such as gateway not responding, negotiation fail,
> etc. Has
> >anyone experienced this?
> >
> >Suggestions, advices, or thoughts are highly appreciated.
> >
> >
> >
> >Thanks in advance,
> >
> >Edward
> >
> >=================================================
> >To set vacation, Out-Of-Office, or away messages,
> >send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> >in the BODY of the email add:
> >set fw-1-mailinglist nomail
> >=================================================
> >To unsubscribe from this mailing list,
> >please see the instructions at
> >http://www.checkpoint.com/services/mailing.html
> >=================================================
> >If you have any questions on how to change your
> >subscription options, email
> >fw-1-owner AT ts.checkpoint DOT com
> >=================================================
>
> --
> Reinhard Stich ASSIST R.Stich AT internet-security DOT at
> Internet Security AG, 1150 Wien, Johnstrasse 29
> Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
