tgreene
Executive Editor

Sweetspot simplifies IPSec deployment

Opinion
Jun 1, 20062 mins

* Sweetspot tokens eliminate the need to install VPN clients on all remote machines

A start-up called Sweetspot Solutions has a way to get around deploying IPSec client software on all the remote machines that might want to access a VPN.

The company makes a USB token that contains an IPSec client capable of interoperating with VPN gateways made by other vendors. So far, the list is made up of Astaro, Cisco, Nortel and Watchguard.

The tokens, called S3 USB Keys, eliminate the need for network technicians to install VPN clients, configure them and later update them.

They also improve authentication security because the tokens are also smart cards that support two-factor authentication. The S3s submit a code to a Sweetspot server in the network and the user is prompted for a password as well.

The device then automatically establishes a VPN link to the designated third-party gateway. The Sweetspot server can also act as the gateway.

This is simpler and perhaps less confusing to end users than having to boot up a VPN client. They plug in the token, type in a password and they’re done.

The company says it’s considering adding other tools to the device, like anti-virus scanning of the machine that’s being used so it doesn’t infect the network being accessed. Sweetspot says it doesn’t want to write its own software, but rather is looking for a partner whose software Sweetspot could package with S3.

The S3 tokens are available now and cost $135 each, but the company says that for large deployments, a lower price could be worked out.