Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Configuring a VPN client
Chapter 14: Configuring Virtual Private Networks
Sidewinder G2 VPN overview
To establish an encrypted session between a laptop or desktop computer with
the Sidewinder G2 and gain access to a trusted network, the user needs to
install a VPN client. For details on installing and configuring your VPN client,
consult your product documentation.
In many cases the VPN client will be SoftRemote ® . Secure Computing and
SafeNet partner to make that VPN client available from Secure Computing.
When you order your SoftRemote client software from Secure Computing, you
receive a copy of the VPN Administration Guide available. This guide is also
available at www.securecomputing.com/goto/manuals. It provides detailed
instructions for implementing a VPN using a Sidewinder G2 and SoftRemote.
Extended Authentication for VPN
The Extended Authentication (XAUTH) option provides an additional level of
security to your VPN network. In addition to the normal authentication checks
inherent during the negotiation process at the start of every VPN association,
Extended Authentication goes one step further by requiring the person
requesting the VPN connection to validate their identity. The Extended
Authentication option is most useful if you have travelling employees that
connect remotely to your network using laptop computers. If a laptop computer
is stolen, without Extended Authentication it might be possible for an outsider
to illegally access your network. This is because the information needed to
establish the VPN connection (the self-signed certificate, etc.) is saved within
the VPN client software. When Extended Authentication is used, however, a
connection will not be established until the user enters an additional piece of
authentication information that is not saved on the computer—either a onetime
password, passcode, or PIN. This additional level of authentication
renders the VPN capabilities of the laptop useless when in the hands of a thief.
Implementing Extended Authentication on the Sidewinder G2 is a simple two
step process.
1 Specify the authentication method(s) that are available on your Sidewinder
G2 See “Supported authentication methods” on page 277 for information on
supported methods.
Do this by selecting VPN Configuration > ISAKMP Server, then enabling
the desired methods in the Available Authentication Methods field. See
“Configuring the ISAKMP server” on page 402 for details.
399