vpn

Building Linux Virtual Private Networks (VPNs)
$44.99
This book gave a solid grounding in what is available and a broad idea of how to use each of the options, such as IPSec with Openswan; PPTP with PopTop, using SSH+PPP, and other more proprietary VPN methods.

Some of the info is a bit dated; For example, many Linux kernels these days come standard with support for IPSec and PPTP as modules. I definitely recommend after reading this book and deciding on a VPN strategy, that you find quality web sites with more up-to-date information about how to configure your selected VPN technology on your selected Linux distribution. I chose Debian/GNU Linux myself. With this book and some updated information added to that foundation, I feel like I have a good start.

Netgear VPN01L Vpn Client 1 User
$56.99
First of all it is simply a re-branded SafeNet SoftRemote client I have used with Watchguard and other hardware vendors for over 10 years. The client comes with no presets or Netgear specific advantages. It is just as tedious to setup as any other client including free ones like TheGreenBow and Shrew. It does not work with Vista 64bit. I see no reason why this client which has been around for MANY years should be an added cost, or why there is not a Netgear specific client that could work with Netgear hardware. In any event, not a happy camper. To be fair I will say that if and when you get it connected it is a solid client- and also that I have never had it crash on me.

Netgear FVS336G ProSafe Dual WAN GigaBit SSL VPN Firewall
$294.99
I have used two of these for about 6 months now, and for the most part I am very satisfied. I use them to tie two offices together via full-time VPN tunnel, which is easy to set up, using the VPN setup wizard. I am not using the 2nd WAN on either, but I may in the future based on bandwidth needs. The (essentially unlimited) SSL VPN is a great cost-saving measure - no need to buy individual client licenses like with a SonicWALL. The SSL VPN works well with Windows and OS X, and presumably Linux, although I haven't tried it. The only caveat is that the SSL VPN is not currently compatible with 64-bit Windows OSs, and Netgear hasn't said if they plan to make it compatible. (Not sure why one of the reviewers was having problems with Firefox - Firefox 3.0.8 connects well on both Win XP and OS X 10.5 for me.) The initial configuration of the SSL VPN gave me some grief, but through the Netgear forums and some trial and error, I got it working (it seemed like there was some hidden limit on the login page message which caused the VPN not to work, if the message is too long?)

The phone tech support for the ProSafe line is pretty good. I was having problems with one of the FVS336G's dropping the WAN connection, and the latest beta firmware cleared up the problem. I was able to install an SSL cert on one for tunnel access with a few hitches (line endings seem to be an issue), but it is working well now (previous firmwares made this feature all but useless, from what I read on the discussion boards.) And Netgear has a very good replacement policy, and next-day turn around if you buy that service option.

So bottom line: a little on the tricky side to get set up, depending on how many of the features you use, but after that it's been working well. I would buy more.

The Complete Cisco VPN Configuration Guide
$90.00
Very disappointed. I have a 950 page book that does not cover setting up an IOS router for remote access using PPTP or L2TP. WTF? Heck - that's why I bought this expensive book. If you have deep pockets and can buy whatever cisco gear you like then this book will likely introduce you to many possible VPN solutions. But there seems to be a bias in the book toward large enterprise solutions - with little or no consideration given to SOHO and small businesses. Many of us make do with the resources that we have available and can't just go out a buy stuff because the author thinks a remote access concentrator would be "best." I still can't believe that he doesn't cover configuring IOS for access by Windows PPTP or L2TP clients. I'm stunned. With this glaring omission I can't help but wonder about the completeness of the other content. Thumbs down.