The VPN check for adaptive policies is tied to the VPN software you are
using and will only work with the supported clients. There is a work
around for this issue though that you can use. If you specify the IP
range your concentrator gives out in your corporate address range you
can have your agents switch to CorpNet when they establish a VPN
connection. You would only have CorpNet and Default in this situation,
but the majority of our customers have actually found their CorpNet and
VPN policies wined up being almost identical anyway.
Just as a side note. The VPN address range is not used by Adaptive
Policies, they are actually only used by the AV Compliance feature. If
you have AV Compliance enabled and you are out of compliance it will
keep your agents from establishing a VPN connection. The agents will
also be blocked from communicating to IP's in your CorpNet address
range.
Thank you,
Adrian Kaylor, CISSP
Technical Product Manager
Internet Security Systems
Phone: (404) 236-3052
-----Original Message-----
From: issforum-bounces@atla-mm1.iss.net On Behalf Of MATT PIERCE
Sent: Friday, March 11, 2005 12:11 PM
To: issforum@atla-mm1.iss.net
Subject: [ISSForum] RSDP and Safenet
Does anyone have any experience getting clients using the Safenet VPN
client to do adaptive profile switching? I have entered the Client DHCP
rangeinto the vpn field of Adaptive Policy Settings. I'm making these
changes on the properties of the client group, Add / Edit group
Settings. Clients using the Intel VPN Client do VPN profile switching
beautifully, Safenet does not.
I've also tried adding the gateway addresses without results. I'm
working with Craig Treubig at ISS as well as techsupport. The official
ISS line is that the Safenet client is not supported. I found a
previous Issforum thread that addressed this issue. I'll include it
below. Does anyone know of a method to make this work?
http://lists.virus.org/issforum-0402/msg00004.html
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
