Aruba proposes alternative to using IPSec for remote access security

Opinion
Jun 28, 20072 mins

* Are WLAN APs a secure remote access alternative?

For years, there have been two traditional methods for secure remote access: IPSec and SSL VPNs. Both have been discussed in this newsletter over the years, and each has its definite strengths and weaknesses. Now, wireless LAN provider Aruba has proposed an alternative to using IPSec on the client computer that we find innovative.

For years, there have been two traditional methods for secure remote access: IPSec and SSL VPNs. Both have been discussed in this newsletter over the years, and each has its definite strengths and weaknesses. Now, wireless LAN provider Aruba has proposed an alternative to using IPSec on the client computer that we find innovative.

Aruba proposes that telecommuters and road warriors consider deploying Aruba’s special remote-access point (RAP) software on the company’s APs and using the Aruba APs from home or hotel rooms. The APs — rather than your client device – communicate with Aruba’s centralized controller in your data center over an IPSec tunnel. This precludes the user from having to mess with passwords, PINs and IPSec key fobs.

The only requirement is that the remote AP has wired Internet connectivity.

This approach certainly seems to us to have some appeal. But we also turned to our colleague, Joanie Wexler, author of Network World’s Wireless in the Enterprise newsletter, for her take. Joanie said, “This could be easier for home users who have to log in to the VPN repeatedly every day and for road warriors who would like to use multiple wireless devices from a single hotel-room Internet connection.”

If you would like to take a closer look at this solution, a white paper with an extensive explanation is available here. And while you’re at the Webtorials site, you might also want to take a look at a paper on next-generation access, the Kubernan State-of-the-Market report on Mobile WiMAX.

We’d like to hear your thoughts on the Aruba approach. Let us hear from you, and we’ll be happy to share the feedback.

Jim has a broad background in the IT industry. This includes serving as a software engineer, an engineering manager for high-speed data services for a major network service provider, a product manager for network hardware, a network manager at two Fortune 500 companies, and the principal of a consulting organization. In addition, Jim has created software tools for designing customer networks for a major network service provider and directed and performed market research at a major industry analyst firm. Jim’s current interests include both cloud networking and application and service delivery. Jim has a Ph.D. in Mathematics from Boston University.

More from this author