RE: PIX 512E as VPN server : internal users ?

Remember that is you use local users/password the users can not change their 
password and this can become a support drain even for a small number of users.

-----Original Message-----
From: Pablo Hauser [mailto:pablohauser@yahoo.com.ar] 
Sent: 13 January 2005 00:11
To: 'Frédéric Médery'; firewalls@securityfocus.com
Subject: RE: PIX 512E as VPN server : internal users ?

Frederic, Cisco PIX firewalls includes their own local database where
you can configure the users and passwords for the VPN  or for AAA
access, but you must have 6.x Finesse and PDM 3.x versions.
 
__________________________________________________

Pablo D. Hauser
Security Operations Center
IMPSAT
 
 
 



-----Mensaje original-----
De: Frédéric Médery [mailto:mederyf@lexum.umontreal.ca] 
Enviado el: Lunes, 10 de Enero de 2005 22:30
Para: firewalls@securityfocus.com
Asunto: PIX 512E as VPN server : internal users ?


Hello everybody, First post here :-)

We have 2 pix 512E (1 is the failover).
I'm trying to configure the pix as a VPN server.
I'm no use to configure IPSEC/L2TP VPN server (except MS ones)

I read about configuring PIX as a VPN server (CISCO web site). But It
talked about TACACS and radius as the users database.

We do not have RADIUS or TACACS server so can we have users inside the
VPN ?

Do you know good how-to sites for PIX 512E ?

Thank to all !