Despite being a network security specialist, WatchGuard hasn’t focused heavily on SSL VPNs. Its latest SSL 100 appliances signal its intent with a range of authentication methods that rival more costly enterprise-level solutions.
Prices start with a 25-user licence that can be upgraded in packs up to the maximum 100 users. This 1U appliance is deployed in a DMZ where you configure your firewall to route remote user requests through to it.
For installation we opted for the single arm mode which only uses one of the two available Ethernet ports. You can use the second port to provide remote access from two separate DMZs. At this stage we’d recommend taking time out to understand how all the authentication methods work as the appliance supports no fewer than 16.
WatchGuard offers five methods starting with browser authentication using PINs or passwords. You have SSL challenge and response, which uses tokens to generate passwords, and Mobile Text, which sends OTPs (one time passwords) via SMS to users after they provide their details at the web portal.
There are 11 other methods available, including AD, LDAP, Novell’s eDirectory and form-based authentication. Users can be added manually, but we opted to import test users from our AD server as this allowed us to include account details such as AD passwords and mobile numbers.
Two types of network resources can be defined and those accessed using a browser are classed as web resources. These can require a separate application to access them and would include RDP and third party apps. To help with setup, WatchGuard provides templates of partially configured standard resources.
We defined resources for OWA, RDP, Windows file shares and our SBS workplace to test WatchGuard’s authentication methods and were impressed with the tight security. The SSL challenge requires the Mobile ID client installed on the user’s laptop or a Java-enabled mobile phone. Users enter their credentials at the portal and are challenged with a number sequence.
Using the Mobile ID client they enter their unique PIN followed by the number sequence, which generates an OTP to enter into the portal. The Mobile ID client keypad is a smart feature that randomly jumbles its numbers to confound keyloggers. The Web SSL method also fools keyloggers as it requires passwords to contain at least two numbers that must be entered using the portal keypad.
The appliance offers end point assessment where it scans client systems looking for specific files, Registry entries and required software. The Abolishment feature clears browser caches and downloaded files. And you can even use SSO.
The SSL 100 delivers some of the toughest security for remote workers at a price SMBs can afford. The range of authentication methods is unbeatable at this price, allowing remote access to network resources to be strictly controlled.
Ratings | |
|---|---|
Warranty | |
| Warranty RTB years | 3 |
| Warranty C&R years | 0 |
| Warranty On-site years | 0 |
| Warranty extra information | |
Physical | |
| Server format | Rack |
| Server configuration | 1U |
Processor | |
| Processor | Intel Celeron M |
| CPU nominal frequency | 1.30GHz |
Storage | |
| Hard disk configuration | 80GB SFF SATA hard disk |
| Total hard disk capacity | 80 |
Networking | |
| Gigabit LAN ports | 0 |
| 10/100 LAN ports | 2 |
Related Posts
Samsung Galaxy S7 Review: A Great Phone in its Day, but Don’t Buy One
Pluto TV Review—Is It Worth It?
ExpressVPN Review – Unbiased and Tested In-House
“Your Payment Requires Additional Review” in Zelle – What Does it Mean?
CyberGhost Review
Private Internet Access Review
How To Fix Mac Preview Images Not Showing
The Best AI Detectors
How to Slide Into DMs
Disclaimer: Some pages on this site may include an affiliate link. This does not effect our editorial in any way.
