Fwd: Cisco 3030

Hi,

> I wonder if the Cisco 3030 vpn concentrator offers a good
> endpoint security on IPSec or WebSSL client side ?
> (can we enforce a security policy like "don't open the tunnel if the personal 
> firewall is off")

Yep, you can enforce policies such as firewall policies on VPN clients using 
the Cisco VPN 3000.

For IPsec remote access VPNs, you can enforce firewall policies under the 
'Client FW' tab. See:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_guide_chapter09186a00803ee1f0.html#wp2199987


For SSL remote access VPNs, you can use the Cisco Secure Desktop. See:

http://www.cisco.com/en/US/products/ps6742/products_configuration_guide_chapter09186a0080577b62.html#wp1041425


It works pretty well for both IPsec and SSL remote access VPNs, in my 
experience.

Hope that helps,

Mark



CCIE#6280 / CCSI#21051 / JNCIS#121 / etc.

Author:

www.ciscopress.com/title/1587051796
www.ciscopress.com/title/1587051044