Feeds

NetScreen turns to SafeWeb for SSL VPNs

Security v. Convenience

  • alert
  • submit to reddit

Top 5 reasons to deploy VMware with Tegile

ComputerWire: IT Industry Intelligence

NetScreen Technologies Inc has outlined its response to the emerging market for SSL-based extranets as a complement to IPSec VPNs, partnering this week with SafeWeb Inc, one of the startups that is focusing on that market,

writes Kevin Murphy

.

Emeryville, California-based SafeWeb has been selected for NetScreen's Global Security Alliance. The two companies will co-sell each other's products, with some technology integration work likely on the horizon.

This year, companies such as SafeWeb, Neoteris Inc and Aventail Inc have been pushing SSL-based tunneling extranets as a way to reduce the management costs involved in regular IPSec VPNs, which require client software to be deployed and maintained.

The idea is that you sacrifice some security for convenience, deploying a VPN for mission critical remote users and an application proxy, accessed with SSL tunnels and an unmodified web browser, for more general purpose remote users.

"In a given enterprise there are X percent of mobile workers that need hardcore access into databases and ordering systems," said NetScreen director of corporate marketing Chris Roeckl. "Some users need access to a smaller set of applications such as email."

Check Point Software Technologies Ltd, NetScreen's main competitor, has distanced itself from the SSL-VPN space somewhat, although it did turn on some SSL tunneling features in its VPN-1 earlier this year that go some way to address it.

The problem with SSL is that the administrator has no control over the access point. A remote worker could access the corporate services available to them from an internet café with who-knows what kind of malicious software installed.

"[It's] the classic question in implementing a VPN," said NetScreen's Roeckl. "It's really up to the customer to figure out what level of security they feel comfortable with."

The deal with SafeWeb is not exclusive. Roeckl said the company usually partners with two vendors in any given market. Neoteris seems like a likely choice if NetScreen wants to sell another firm's SSL product too.

Roeckl did say, however, that a certain level of technological integration - most likely of the SafeWeb SEA into NetScreen's management tools - is a possibility, though nothing definite has been decided.

© ComputerWire

Intelligent flash storage arrays

More from The Register

next story
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
You stupid BRICK! PCs running Avast AV can't handle Windows fixes
Fix issued, fingers pointed, forums in flames
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
10 threats to successful enterprise endpoint backup
10 threats to a successful backup including issues with BYOD, slow backups and ineffective security.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Protecting against web application threats using SSL
SSL encryption can protect server‐to‐server communications, client devices, cloud resources, and other endpoints in order to help prevent the risk of data loss and losing customer trust.