Feeds

Aventail touts SSL-VPN appliance

Enters hardware biz

  • alert
  • submit to reddit

Beginner's guide to SSL certificates

ComputerWire: IT Industry Intelligence

Aventail Corp, which started out in 1996 as a supplier of secure sockets layer virtual private networking (SSL VPN) software and then moved on to sell managed services, will today announce its steps into the hardware business with a new SSL VPN appliance targeting enterprise VPN deployments.

Slated for general availability early in 2003, the Aventail EX-1500 appliance uses a combination of (SSL) encryption and proxy technologies to eliminate application dependence and provide access to any web application, as well as a range of client/server-based corporate applications such as SAP, PeopleSoft, Siebel, Oracle, Citrix, Microsoft and Lotus. It is intended to provide authentication and data encryption between servers and web browsers.

This sort of SSL-based VPN arrangement has come in for criticism recently. One problem is that although the VPN tunnel created using SSL may be secure, there is no way of knowing what that tunnel is being used for if the access point itself is not protected from external influences by a firewall. This is especially likely where control of the access point is outside of the reach of corporate security.

Aventail's director of product marketing, Jude O'Reilley accepts that in some deployments SSL has its limitations. "SSL on its own is not enough" he said. "Aventail combines the use of reverse web proxies and circuit-level proxies to provide a layer of authorization as well as an encryption framework built around SSL technology. That provides the necessary fine-grain control and authorization capabilities." It also avoids the complexity of either an Internet Protocol Security (IPSec) client or a full portal implementation.

Pricing of the appliance is likely to start at around $20,000 depending on the number of concurrent users. Its arrival follows the introduction in June of a $5,000 per month managed appliance option that provides secure clientless access to web applications. Seattle, Washington-based Aventail has helped pioneer SSL VPNs, and claims to have over 400 customers using its SSL-based remote access and extranet VPN services.

SSL VPNs are fast emerging as a cheaper alternative to IPSec for remote access, with much lower maintenance overheads. Market trends indicate that IPSec looks set to remain the dominant tunneling and encryption technology used for VPNs, but that SSL-based products will slowly start to gain acceptance in certain verticals, or when used in scenarios like secure remote access to web-based applications. Check Point Software Technologies Inc moved into the budget SSL-based extranet/VPN market in July, with a clientless version of its SecureVPN gateway. It looks set to challenge start-ups like Neoteris Inc, SafeWeb Inc and Array Networks Inc, as well as Aventail.

The market for SSL-based VPN access has grown in popularity recently, and offers a simple and low-maintenance way of creating a secure connection to corporate systems from remote devices such as mobile phones, PDAs and virtually all internet browser-enabled terminals, without the need for additional client software. Gartner predicts that by year-end 2004, some 60% of corporate users will regularly use a thin-client VPN, instead of a full, fat-client VPN for access to business data.

© ComputerWire

Protecting users from Firesheep and other Sidejacking attacks with SSL

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
Jihadi terrorists DIDN'T encrypt their comms 'cos of Snowden leaks
Intel bods' analysis concludes 'no significant change' after whistle was blown
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
China hacked US Army transport orgs TWENTY TIMES in ONE YEAR
FBI et al knew of nine hacks - but didn't tell TRANSCOM
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Protecting users from Firesheep and other Sidejacking attacks with SSL
Discussing the vulnerabilities inherent in Wi-Fi networks, and how using TLS/SSL for your entire site will assure security.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.