PortWise SSL VPN
October 03, 2005
$16,000 for 50 concurrent users
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: Suit large distributed environments.
- Weaknesses: Some browser-dependent checks are clumsy and unreliable.
- Verdict: Very good platform for enterprise users.
The product has some good points, but makes one mistake several times: it trusts the browser too much. For example, the product is licensed to specific hostnames, but we could not connect to the web GUI using the box’s assigned IP address because it is actually checking for the hostname in the browser request, something which is very easy to fake and hence pretty pointless.
Later, we saw something similar in “device definitions” which tie into endpoint control, but amount to checking browser user agents, again something which is easily (and commonly) faked.
PortWise sports far and away the most comprehensive list of authentication schemas we have seen, and you can configure them in many ways. Users can be imported from delimited files, and the software provides good help on how best to format the files.
In general, the help is excellent, despite its dreadful system of multiple browser window pop-ups.
This is the only product on test to support role-based admin. Configurations can be “published” to other PortWise systems, but must be manually activated by an administrator there.
Endpoint security requires an ActiveX control, and can clean up specific types of files, delete the browser cache, and provide data about the local files, registry, network, process, and Windows runstate. It can also coordinate policies via a policy server.
There are plenty of options for filtering and mapping connections for setting up web applications. Again the help is good, but lacks specific examples.
The system also has a lot of resources preconfigured, such as Exchange, Domino and Citrix, which is very good.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Senior Security Engineer
Loveworklife Recruitment - United Kingdom
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Microsoft update left Azure Linux virtual machines open to hacking
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- ICYMI: CEO Sacked; MS Zero-day; Passwords dropped; Ransomware wild, charging hack
- 9.2 million medical records for sale on darkweb
- ICYMI: Tesco warned; IP Bill threatens economy; German routers offline; Azure trojan; Gooligan fraud
- Data centres are on the move - where will they end up?
- 90% of ITDMs believe IAM is crucial to digital transformation success
- Research: Hacked companies could see customer exodus if breached
- Misconfigured drive exposes locations of explosives used by oil industry