Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.
You can do some version of host checking, but this largely depends on your vpn manufacturer. (regardless of whether its SSL or IPSEC).
We use the Cisco Anyconnect client to do host verification before we allow a device to establish a VPN tunnel. In our particular case, we put a registry key...
I'm fairly certain that this does exist in SNMP, but you are going to have to search the 20 different MIBs that are available for ASA to find it.
I know this is possible because I have an SNMP counter that I watch which tells me how many concurrent VPN users are online. That also took...
For high throughput and low budget, roll your own is the only way to go.
Most companies class their firewalls by throughput, so to handle a true 150mbps connection, you are easily in the 1k - 2k range (if not higher).
pfsense or untangle is the way to go.
One thing to note. Make sure you have backup power for your HVAC system. You can build all the redundancy + generator for your power needs, but it won't mean squat if your HVAC system isn't online during an outage.
As far as the network switches go, the OP would need to explain his environment before recommending for/against specific switches.
The 3750's are great in IDF use and in certain low -mid size core designs. But if you push line rate on some interfaces or have a mid-size SAN, you will...
I guess the qualifier would be, "when setup correctly".
I use our wireless, 8 hours a day. 4402 controllers, 1242 AP's. 802.x authentication.
I guess you have had a bad streak of experiences, but to say wireless is completely unreliable is laughable at best.
Here is another way of looking at it.
SNMP Polling means the Network management server (Nagios, Cacti, PRTG, etc), will poll the managed device (switch, server, etc) at specific intervals. It's like scheduling a ping test every 30 seconds. But instead of sending and ICMP packet, it will do a...
Call up the nearest colocation provider and look at all the redundancy they provide. Now think about building that out in your own new environment. Can you do it? Is it cost effective?
Some things to think about.
Make sure that your AC for your room + UPS are also on a circuit protect by...
Well, when they released 8.x, they only had one type of licenses for anyconnect.
That licenses has now become Anyconnect Premium, with a entry level license called Essentials, mobile, etc
here is a good breakdown...
So what happened is, with the release of ASA 8.x, Cisco said Anyconnect would be the only support 64 bit client.
Then a year or two ago, they released a 64 bit IPSEC Client.
Anyconnect 2.x is 32/64 bit however SSL VPN only.
Anyconnect 3.x (secure mobility) is 32/64 bit and supports...
Lastly, the other thing you could do is keep the ASA, and have it fully managed by a MSSP and not worry about it anymore. They could fix the design issues and handle all the rule creation for the both of you.
Since your needs are somewhat modest, pfsense, smoothwall, ipcop, untangle will probably fit your bill. Which solutions does your netadmin like?
Out of those, it seems like smoothwall has a commercial option that is more inline for SME (patches, support, etc).
Above those level (entry level...