* The upside to Array Networks' new software
There’s a new wrinkle being led by Array Networks, supporting site-to-site VPNs using SSL technology.
The upside is that this new capability will let businesses link sites over the Internet with Layer 7 control over what resources can be accessed from the other side. IPSec VPNs support Layer 3 network access, which requires network topology changes to limit access to specific resources.
Some businesses already use IPSec and SSL for their VPNs – IPSec for site-to-site and SSL for remote access. Some use a single gateway that has dual IPSec/SSL support, but others use separate gateways, one for IPSec and one for SSL. The latter will be able to consolidate onto a single SSL-based platform with Array’s new software.
SSL is firewall friendly, using standard SSL ports only, which means no reconfiguration of the firewall to accommodate the VPN. IPSec vendors in most cases dealt with their complex firewall issues by bundling the VPN technology with an integrated firewall.
Since IPSec is well established and widely deployed, chances are businesses won’t rip out their IPSec gateways for this new technology. It’s always difficult to dump something that is working well for a replacement that offers essentially the same functionality.
However, businesses that have significant remote access needs and IPSec gear that is reaching end-of-life, might consider this platform.
Analysts say they know of other SSL vendors that are going working on the same thing, but are keeping mum about which ones. Stay tuned.
