1. UAB VPN Service David Wolford, Communications Network Specialist

2. UAB Virtual Private Network  User Services has provided VPN for many years  First service was called PopTop and used PPTP  Second and current service uses a Cisco 3060 VPN concentrator and uses IPSEC  We currently average ~ 50 IPSEC concurrent users

3. System Information  Current appliance is a Cisco 3060 which has been in service for approximately eight years.  We are preparing two Cisco ASA 5550 security appliances to replace our 3060 in the near future.  The Cisco ASA 5550’s will provide load sharing redundancy and will allow us to use the Cisco SSL client.

4. Reasons to Upgrade Service  Cisco 3060 was originally purchased for wireless users. It was pressed into service with the blocking of Microsoft ports and is now end-of-life by Cisco.  Implementation of border firewall and plans of tighter border security will increase the need.  Cisco is favoring SSL for newer OS platforms like Windows 64-bit.

5. ASA5550

6. VPN Client Options  Cisco IPSEC client IPSEC not available for 64 Bit Windows  SSL Client

7. Client Download https://vpndpo.dpo.uab.edu

8. SSL VPN Client

9. Cisco IPSEC Client

10. Departmental VPN Groups  Offers IP addresses from a defined pool of addresses for firewall traversal and resource access  DCNS can add or remove users from groups  Works with SSL and IPSEC VPN

11. Network Diagram

12. Split Tunneling

13. On the Horizon  Integration with campus NAC  Two factor authentication