CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 52 attendees signed up from 14 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Nokia And IPSO
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2005-08-14
BarryStiefel BarryStiefel is offline
Administrator
 
Join Date: 2005-08-11
Location: San Francisco, CA
Posts: 549
Rep Power: 10
BarryStiefel has disabled reputation
Default Can you authenticate Voyager using SecurID over Radius?

Can you authenticate Voyager using SecurID over Radius?



I am implementing IPSO 3.6 authentication with SecurID for HTTPS and SSH services. The Nokia Support site says that on IPSO 3.6 HTTP is not recommended, but it does not state the reason. The reason for this is quite simple: in IPSO 3.6 and before, authentication is done using the standard authentication present in HTTP. This means every single element in a page requires authentication information to be sent along with that request. Since IPSO does not cache authentication information, each one of those requests would have to be authenticated by the SecurID server.

Since your SecurID passcode changes every 60 seconds, this effectively means that you would have to type in your SecurID code for authentication every sixty seconds, perhaps in the middle of a page load. This is one reason why it is not recommended.

In IPSO 3.7 and above, authentication is done with cookies, which means you may be able to use SecurID, though I haven't personally tested it.

-- PhoneBoy - 01 Jan 2004

FAQForm FAQs.Class: FAQs.OS: OsNokiaIPSO FAQs.Version:
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 04:09.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0