Re: [FW1] OT - PGPNet and X.509

[Technical Incursion Countermeasures <lists@ticm.com>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Yes - PGPNet does exactly the same thing as the Securemote client. The only
difference is that you can sign the user's PGP key with the CA.

Bret


At 19:01 2/05/00 -0400, you wrote:
>The customer is using Checkpoint VPN-1 and its SecuRemote Client.  If they
>use PGPNet, would there be any duplication?
>
>
>----- Original Message -----
>From: "Vincent Illaire" <Illaire@Astux.com>
>To: "Ivan Fox" <ifox100@hotmail.com>
>Cc: "Firewall-Wizards@Nfr. Net" <firewall-wizards@nfr.net>; "Firewall-1"
><fw-1-mailinglist@lists.us.checkpoint.com>; "Firewalls@Lists. Gnac. Net"
><firewalls@lists.gnac.net>
>Sent: Tuesday, May 02, 2000 5:58 PM
>Subject: Re: [FW1] OT - PGPNet and X.509
>
>
>Ivan Fox wrote:
>>
>> A customer has already had a PKI in place (Microsoft Certificate
>Authority,
>> Netscape LDAP and Netegrity's Siteminder).  Does it need PGPNet?  It seems
>> to me that they are doing similar thing.
>
>PGPNet is a desktop program than creates IPSec tunnels on Win95 and
>Win98. That's a standalone program for Windows 98 and NT 5, or Mac 7.6.
>
>It's not an authentication / sso system, it's a VPN client.
>
>It can use X509 certificates to authenticate the gateway to the client,
>and the client to the gateway. You need a PKI program to do that, PGPNet
>won't create the certificates. It can also use pre-shared keys.
>
>HTH.
>--
>  Freelance Sécurité, Système Unix & NT, Réseaux, et Logiciels Libres.
>  Consultant Indépendant (Astux)  AFUL / Apodeline / CLA / SCG
>  mél: Vincent@Illaire.com        SMS: Illaire@Itineris.net (court!)
>  Tél/fax: +33 1 43 33 51 33      GSM: +33 6 80 08 93 83 (fin proche)
>
>-
>[To unsubscribe, send mail to majordomo@lists.gnac.net with
>"unsubscribe firewalls" in the body of the message.]
>
Technical Incursion Countermeasures 
consulting@TICM.COM                      http://www.ticm.com/
voice mail/fax: (+65)98421426(UTC+8 hrs)      

The Insider - a e'zine on Computer security 
http://www.ticm.com/info/insider/index.html
-
[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]