Firewall (cheap) that supports PPTP inbound to firewall

D-link 804 and other does IPSec , then you install an IPSec client on the pc-s.

It was nice of you to point this out, but I specifically asked for PPTP. Having worked with many firewalls and routers, I'm already aware that most of them support IPSec.

In case anyone else missed it, I specifically need a PPTP solution.

A cisco pix 501 will do pptp and costs under 500 USD.

greg

A small Linux box running iptables and poptop

Oh bugger, I just noticed you said NON-PC and must be an appliance. Sorry, but I'll post anyway because others might find it useful.

The reason is reliability and stability. In all the years that I've been doing this I've never found anything more stable and reliable than a dedicated appliance device. There is nothing "strange" about a inexpensive firewall that permits external PPTP connections.

I can already setup a PC with nix and various firewall products, that's not something that this solution needs.

The requirement is an appliance that has stability, reliability, ease of management (even for a non-firewall type), and PPTP inbound terminating at the firewall appliance.

A PC running any OS/firewall does not meet the needs for this job.

Now that is strange: why NON-PC ???? You would buy any strange box with proprietary software in it, but not a PC with just a proprietary BIOS ?

Or do you mean NON-WINDOZE ?

In that case, nothing cheaper than a Pentium-1 box (people throw these things away these days) and a Linux-IPTables firewall. Can be done without a hard disk, right from a floppy or a CD, without a video card (managed over the net). Needs little memory too. Two ethernet cards in it.

Bring along a Unix guy to set it all up.

frgr Erik

Not pptp but another CHEEP solution to this problem is to run a Linux firewall and use Safe Passage as the VPN instead of running PPTP. Safe Passage tunnels all internet traffice including Windows Filesharing via SSH (even tunnels DNS requests). So just run an SSH server on the same linux firewall and you're all set. Note that with Safe Passage you have to go directly to the domains or IPs of the windows machines or printers you are trying to access via the VPN (since UDP can't be tunneled). Email and everything will be secure.

See

You know, I'm always amazed at how people want to answer a question, with very specific needs, with something that does not meet the needs of the solution.

If I wanted to just enable RAS on the clients server and do a PPTP pass through on the router I would be just as secure, no additional hardware, and have it a lot easier to manage for them than installing a Linux based solution.

I called the Zywall support team and was told that their units are just high-end routers, that they don't support PPTP inbound connections, only IPSec connections - which would work if I wanted to do it that way, but there are a large number of routers that support IPSec that are cheaper too.

I appreciate you taking the time to reply, but your reply does not fit the constraints of the solution path.

Mark, Have you looked on ebay for reconditioned/used watchguard's?

I recently picked up a FB III 700 for around 300GBP works like a dream and was in "as new" condition with a 20 seat MUVPN license thrown in.

Just my .2p

Yes, I have, and I'm considering that option. The problem with ebay is that the units don't come with a valid key, no warranty, and no live security service. While I have the software, the licensing is a issue if you want to install for customers - the Live Security license is $975 USD in most places.

Yeah, that does pain me when I have to pay that.

But what do you actually need from the livesecurity?

I've not tried it, but is it not possible to download the latest software from a valid subscription and update the non-subscribed FB with it? Or does it check the serial number etc on install?

Sorry, maybe I should have read your post properly before replying!

While you can easily use one subscription key/firmware to update many units, it's not ethical or legal. They provide one key per box and that means one $975 license per unit.

Last I checked, the Snapgear units supported pptp terminating at the firewall. Have you looked at those? They were bought out by another company, can't remember its name.

They're nice units, based on Linux. I had a couple for a while.

Brad

I got Comtun 4.5 at

"Brad" escribió en el mensaje news: snipped-for-privacy@4ax.com...