|
|
|
|
|
|
 
|
ISP-Planet Survey: Managed Security Service
Providers |
|
Provider
|
|
RA VPN Platform(s)
|
Network VPN Platform(s)
|
|
Encryption & Integrity
|
Authenticate Method(s)
|
|
Allegiance Telecom |
CheckPoint FW-1/VPN-1 on Nokia HW | CheckPoint SecuRemote |
N/A |
IPsec, PPTP, L2TP, SSL, GRE, proprietary | 3DES, DES, FWZ, MD5, SHA1 | All CheckPoint supported methods |
|
Nortel, Cisco, AT&T-built SIG,AT&T NetGate (SOHO Hardware VPN Client) |
Nortel, Cisco, AT&T-built SIG, AT&T Network Access Client (VPN+firewall) |
MPLS |
IPsec (S2S) MPLS (NW) IPsec, PPTP, L2TP, SSL (RA) |
DES, 3DES, MD5, SHA1 |
Uname/pass or tokens (Safeword, SecurID, etc) via RADIUS, ACE, LDAP, can use customer's DB |
|
|
Aventail Corporation |
N/A | SA-9000 andSA-1000 Appliances run Anywhere VPN for client/server apps, ExtraWeb server for web apps | N/A | SSL, SOCKS |
RC4, 3DES, DES, MD5, SHA, etc. |
Certificates, uname/pass, SecurID tokens, SmartCards via RADIUS, ACE, LDAP, PKI, can use customer's DB |
|
Bangalore Labs |
CheckPoint VPN-1, Nortel Contivity, Cisco PIX and Cisco VPN Concentrator |
CheckPoint, Nortel VPN Clients |
N/A |
IPsec, PPTP, L2TP, SSL, GRE | RC4, 3DES, AES, MD5, SHA1 |
PSK, certificate, uname/pass, SecurID token via RADIUS, LDAP, customer's DB |
|
Cable & Wireless |
Cisco, Nortel | Unspecified VPN Client |
IP VPN QoS |
IPsec, MPLS, PPTP, L2TP, SSL, GRE, proprietary | RC4, 3DES, AES, MD5, SHA1 | RADIUS, uname/pass, SecurID token via RADIUS, PKI, customer's DB |
|
ClearPath Networks |
N/A |
iVPN Remote Client |
MPLS to deliver end-to-end QoS over ATM core and DSL, FR, T-1, DS3, Ethernet access links |
IPsec, PPTP, L2TP, L2TP over IPsec, L2F | DES, 3DES, AES, RC4 |
Uname/pass, NT Domain, LDAP, RADIUS, Hard/Soft tokens (SecurID, Axent), certificates, Smart Cards (all major vendors, MSCAPI) |
|
Expertcity Inc. |
N/A | ASP model, Web Browser | N/A | Proprietary / HTTP |
AES, MD5, SHA1, & integrity-protected AES stream cipher |
Uname/pass plus optional One-Time Password or SecurID token (checked against customer-hosted ACE Server) |
|
Genuity Managed Services |
SITE PATROL: CheckPoint VPN-1, Nokia IP 120, 330, 530, 710, 740 VPNA/VBOS: Nortel Contivity Extranet Switches 4500/4600, 2600, 1510, 600 |
VPNA: Nortel Extranet Access Client (EAC) |
N/A |
IPsec, PPTP, L2TP | 3DES, MD5 |
Certificate, uname/pass, SecurID token via RADIUS, ACE, LDAP, PKI, customer's DB |
|
Guardent |
Market-leading firewalls, including NetScreen, Cisco PIX, CheckPoint on Nokia | Unspecified VPN Client |
N/A |
IPsec (with vendor specific variants) | 3DES, AES, SHA1, MD5 | Uname/pass, SecurID, can use customer's DB with upfront consulting |
|
Interliant, Inc. |
CheckPoint on Nokia, Avaya |
Unspecified VPN Client |
N/A |
IPsec, L2TP, GRE | RC4, 3DES, AES, MD5, SHA1 |
Certificate, uname/pass, SecurID token via RADIUS, ACE, LDAP, PKI, AD, customer's DB |
|
Internet Security Systems |
CheckPoint (Nokia, Sun Fire), Cisco PIX, NetScreen | Unspecified VPN Client | N/A | IPsec, PPTP, L2TP, SSL, GRE |
RC4, DES, 3DES, AES, MD5, SHA1 |
Certificate, uname/pass, SecurID token via RADIUS, ACE, LDAP, PKI, customer's DB |
|
LURHQ Corporation |
CheckPoint VPN-1, Cisco PIX, FreeS/WAN |
N/A |
N/A |
Depends on customer hardware platform | Depends on customer hardware platform |
Depends on customer hardware platform |
|
Provider
|
|
RA VPN Platform(s)
|
Network VPN Platform(s)
|
|
Encryption & Integrity
|
Authenticate Method(s)
|
|
MegaPath Networks |
Hub: NetScreen 25, 50, 204 Spokes: Netopia or Efficient VPN-enabled routers, NetScreen 5XP |
SafeNet VPN Client |
N/A |
IPsec, L2TP or L2TP over IPsec | DES, 3DES, MD5, SHA1 | PSK or uname/pass, statically defined |
|
NetSolve, Inc. |
Cisco, CheckPoint, NetScreen, Nortel, 3Com |
N/A |
N/A |
IPsec, PPTP, L2TP, GRE, MPLS | DES, 3DES, AES, MD5, SHA1 |
TACACS+, customer's DB |
|
PresiNET Systems |
PresiNET vDeadbolt and vDeadbolt Enterprise Appliances For more information see files on vDeadbolt ( .pdf ) and vDeadbolt Enterprise ( .pdf ) |
Microsoft VPN Clients, "most IPsec Clients" |
N/A |
IPsec, PPTP, L2TP, SSL | 3DES, AES, Blowfish, Twofish, CAST, MD5, SHA1, SHA2 | PSK, certificate, uname/pass via RADIUS, L2TP |
|
SBC Communications |
IP-VPN: Cisco VPN routers: 800, 1700, 2600, 3600, 7200 SW-Based: Windows 98, NT4.0, 2000 and Solaris 8.0 |
Cisco 3000 VPN Concentrators, Cisco VPN Unity Client |
N/A |
IPsec, GRE | 3DES, AES (some router models), MD5, SHA1 |
Certificates or PSK (S2S), uname/pass, SecurID tokens or certificates (RA), via RADIUS, NT, ACE, 3rd party PKI or customer's DB |
|
Secure Designs, Inc. |
WatchGuard | Windows PPTP VPN Client, WatchGuard IPsec VPN Client |
N/A |
IPsec, PPTP, L2TP | DES, 3DES, MD5, SHA1 | PSK, certificate, uname/pass, SecurID token via RADIUS, ACE, customer's DB |
|
SecurePipe, Inc. |
SecurePipe Rampart Firewall RM-512 |
Rampart Firewall, SafeNet Client |
N/A |
IPsec, CIPE (Crypto IP Encapsulation) | 3DES, MD5, SHA1 |
PSK, certificate, uname/pass |
|
SecureWorks |
Cisco PIX 500, CheckPoint on Nokia, SecureWorks iSensor | N/A |
N/A |
IPsec, PPTP, GRE, MPLS | 3DES, MD5, SHA1 | Uname/pass via RSA, RADIUS, ACE, LDAP, TACACS+, ACS |
|
Unisys Corporation |
CheckPoint on Nokia, Cisco |
CheckPoint SecureClient (available 3Q03) |
N/A |
IPsec | 3DES, AES, MD5, SHA1 |
Uname/pass, token via RADIUS, LDAP, ACE, customer's DB |
|
Verio SafeGuard VPN.RA |
IntelliSecurity: CheckPoint NG, Nokia IP 120, 330, Nokia 530, 650, NetScreen 5 VPN.CPE: Cisco bundles 1720, 2611, 2621, 2691, 3640, 7206, 73xx |
IntelliSecurity: CheckPoint SecurRemote and NetScreen Remote VPN Client VPN.RA: To be available in 2Q03 |
VPN.Net: Network-basedCoSine IPSX 9500 (network) and Cisco CPE |
IPsec |
IntelliSecurity: RC4, 3DES, AES VPN.CPE/Net: 3DES, DES |
PSK or (for IntelliSecurity only) SecurID or against customer's DB |
|
VeriSign, Inc. |
CheckPoint FW-1/VPN-1 on Nokia and Sun (firewall-resident VPN) |
Cisco PIX (firewall-resident),Cisco 3000 Concentrator (dedicated VPN) |
N/A |
IPsec | DES, 3DES, MD5, SHA1 |
Uname/pass, ActivCard and SecurID tokens via ACE or ActivPack, customer's DB |
|
MCI (WorldCom) |
Cisco and Lucent for CPE hardware, fully meshed or hub and spoke topology | Cisco and Nortel CPE HW & SW |
N/A |
IPsec (S2S) IPsec, L2TP, L2TP/IPsec and PPTP (RA) |
DES, 3DES, AES, MD5, SHA1, DH Groups 1/2/5/7/8 (as of 4/30/03) | MCI or customer-hosted RADIUS, internal/external LDAP using AD, certificates |
|
Provider
|
|
RA VPN Platform(s)
|
Network VPN Platform(s)
|
|
Encryption & Integrity
|
Authenticate Method(s)
|
