FW/IPSec VPN Buyer’s Guide
|
| Safenet |
|
|
Open source code | No |
|
| |
The number of years the | FW/VPN – June 1998 |
|
| |
solutions have been | Deep Inspection/Intrusion |
|
| |
available on the market | Prevention – Feb 2002 |
|
| |
The applications that have |
|
|
| |
been recognized as | FW/VPN/Deep Inspection |
|
| |
breed |
| (Gartner Magic Quadrant) |
|
|
|
|
|
| Simplifies deployment, |
All functionality managed | FW/VPN/Deep Inspection |
| reduces chance for human | |
with the same console | managed with same |
| error that could result in | |
|
| interface/console |
| vulnerabilities |
Built in features that protect |
|
|
| |
against tampering: |
|
|
| |
• | Packaging sealed | Yes |
|
|
• | with custom tape |
|
| |
Uses tamper seals | Yes |
|
| |
| to indicate |
|
| |
• | authenticity |
|
|
|
Hardware can | Yes |
|
| |
| restrict remote |
|
| |
| access via access |
|
|
|
• | lists |
|
|
|
Access list creation | Yes |
|
| |
| based on IP and |
|
| |
• | MAC addresses |
|
|
|
Hardware protects | Yes |
|
| |
| against password |
|
| |
• | overrides |
|
|
|
Hardware uses | Yes |
|
| |
| secure connections |
|
| |
|
|
|
| |
• | for remote access | Yes |
| • A custom OS is less |
Custom OS built for |
| |||
|
| prone to known attacks | ||
| security | Yes |
| |
• |
| than a general purpose | ||
OS is hardened |
| |||
Yes |
| OS | ||
• | FIPs certified for |
| ||
|
|
| ||
| physical protection |
|
|
|
| of keys and |
|
|
|
| configuration, as |
|
|
|
| well as software |
|
|
|
| protection |
|
|
|
Guards against |
|
|
| |
vulnerabilities within the |
|
|
| |
system itself: | One, Juniper Networks |
|
| |
• | The number of |
|
| |
| different patches that | uses a single OS |
|
|
| need to potentially |
|
|
|
• | be applied | None, |
|
|
The general purpose |
|
| ||
| systems or platforms | appliance with custom OS |
|
|
| that are used |
|
|
|
|
|
|
|
|
|
| • Juniper Networks |
|
|
|
|
|
| |
|
| Juniper Networks |
|
|
|
|
|
| |
|
| Access (SSL) for |
|
|
|
| remote/mobile users |
|
|
Copyright © 2004, Juniper Networks, Inc. | 10 | |||
