Juniper blends IPSec and SSL

NETWORK WORLD NEWSLETTER: TIM GREENE ON VPNS
06/07/05
Today's focus: Juniper blends IPSec and SSL

Dear security.world@gmail.com,

In this issue:

* Juniper supports both IPSec and SSL in its NetScreen gateways
* Links related to VPNs
* Featured reader resource
_______________________________________________________________
This newsletter is sponsored by Hewlett Packard
Choosing the Best Architecture

Learn how controller-based architecture for tape libraries best
meets reliability and interoperability requirements in
enterprise storage area networks. Details include how the
introduction of the HP StorageWorks Extended Tape Library
Architecture defines the next generation of tape libraries in
enterprise SAN environments. Download the white paper now!
http://www.fattail.com/redir/redirect.asp?CID=106215
_______________________________________________________________
NW'S RESEARCH CENTER ON SPAM

Go to NW's Research Center on spam and find our in-depth review
of 16 anti-spam products, our spam calculator to determine how
much spam is costing your enterprise each year, the latest spam
news, advice on how to fight spam and more. For the latest on
spam click here:
http://www.fattail.com/redir/redirect.asp?CID=106027
_______________________________________________________________

Today's focus: Juniper blends IPSec and SSL

By Tim Greene

Juniper is supporting both IPSec and SSL in its NetScreen
security gateways, making it possible to use the more
appropriate VPN technology depending on circumstances.

Unlike other IPSec implementations, this requires no IPSec
client software on remote machines, lifting one of the main
objections to IPSec. Many customers find installing and
maintaining the clients to be more time consuming than they can
afford.

Juniper says its IPSec transport agent creates less delay than
SSL, so it is the default. But in cases where network address
translation or firewalls set up by another business interfere,
the agent uses SSL instead.

This blending of the two technologies can be good for customers
looking for the optimal connection. It is also a plus that the
end user doesn't have to do anything about picking which one to
use, a situation that would inevitably result in a spike in help
desk calls.

The same software upgrade that supports the dual VPN
technologies also adds XML rewrite capabilities to the NetScreen
gateways. This makes it more likely that the gateways can
provide SSL access to XML-based content.

Juniper is also adding features to its software that checks
whether remote devices meet security policies before admitting
them to a VPN. The NetScreen gear had this capability before,
but now it can automatically respond to policy shortcomings in
more ways. For example, it can direct the device to a Web site
where it can get updates to bring it into compliance and then
run the compliance check again.

This new release brings some substantive changes to the Juniper
platform that warrant checking out by potential customers
shopping for remote access VPN gear.

RELATED EDITORIAL LINKS

3Com quarantines malicious traffic
Network World, 06/06/05
http://www.networkworld.com/news/2005/060605-3com.html?rl
_______________________________________________________________
To contact: Tim Greene

Tim Greene is a senior editor at Network World, covering virtual
private networking gear, remote access, core switching and local
phone companies. You can reach him at <mailto:tgreene@nww.com>.
_______________________________________________________________
This newsletter is sponsored by Hewlett Packard
Choosing the Best Architecture

Learn how controller-based architecture for tape libraries best
meets reliability and interoperability requirements in
enterprise storage area networks. Details include how the
introduction of the HP StorageWorks Extended Tape Library
Architecture defines the next generation of tape libraries in
enterprise SAN environments. Download the white paper now!
http://www.fattail.com/redir/redirect.asp?CID=106214
_______________________________________________________________
ARCHIVE LINKS

Breaking VPN news from Network World, updated daily:
http://www.networkworld.com/topics/firewalls.html

Archive of the VPN newsletter:
http://www.networkworld.com/newsletters/vpn/index.html
_______________________________________________________________
FEATURED READER RESOURCE
CALL FOR ENTRIES: 2005 ENTERPRISE ALL-STAR AWARDS

Network World is looking for entries for its inaugural
Enterprise All-Star Awards program. The Enterprise All-Star
Awards will honor user organizations that demonstrate
exceptional use of network technology to further business
objectives. Network World will honor dozens of user
organizations from a wide variety of industries, based on a
technology category. Deadline: July 8. Enter today:
<http://www.networkworld.com/survey/easform.html?net>
_______________________________________________________________
May We Send You a Free Print Subscription?
You've got the technology snapshot of your choice delivered
at your fingertips each day. Now, extend your knowledge by
receiving 51 FREE issues to our print publication. Apply
today at http://www.subscribenw.com/nl2

International subscribers click here:
http://nww1.com/go/circ_promo.html
_______________________________________________________________
SUBSCRIPTION SERVICES

To subscribe or unsubscribe to any Network World e-mail
newsletters, go to:
<http://www.nwwsubscribe.com/Changes.aspx>

To unsubscribe from promotional e-mail go to:
<http://www.nwwsubscribe.com/Preferences.aspx>

To change your e-mail address, go to:
<http://www.nwwsubscribe.com/ChangeMail.aspx>

Subscription questions? Contact Customer Service by replying to
this message.

This message was sent to: security.world@gmail.com
Please use this address when modifying your subscription.
_______________________________________________________________

Have editorial comments? Write Jeff Caruso, Newsletter Editor,
at: <mailto:jcaruso@nww.com>

Inquiries to: NL Customer Service, Network World, Inc., 118
Turnpike Road, Southborough, MA 01772

For advertising information, write Kevin Normandeau, V.P. of
Online Development, at: <mailto:sponsorships@nwfusion.com>

Copyright Network World, Inc., 2005