Nortel Networks NN46120-104 - Manual (Page 21)

Software Features 21
Client Security
• Tunnel Guard. Feature for checking the security aspects of the remote
PC client, that is, installed antivirus software, DLLs, executables and
so on.
• WholeSecurity support. Lets you enable a scan of the client PC before
the remote user is allowed to log in to the VPN.
• User session auto-logoff.
• Cache and browser history automatically cleared (only for Internet
Explorer).
Accounting and Auditing
•
Support for logging user session start and stop messages to a syslog
or RADIUS accounting server. The messages can include VPN ID,
user name, gateway address, session ID, session time and cause of
termination.
•
Support for logging CLI and Web User Interface operations (for
example, login, logout and executed operation) to a syslog or RADIUS
accounting server.
Networking
•
Supports creating multiple interfaces within a cluster, for example, to
separate client traffic and management traffic. (Not supported on the
Nortel Application Switch 2424-SSL).
•
Support for clustering over multiple subnets.
• Supports assigning two physical network ports to one interface, to
create a port failover (high availability) solution where one VPN
Gateway is attached to two Nortel Application Switches.
Secure Service Partitioning
The NVG software provides the ability to partition a cluster of VPN
Gateways into separate VPNs. This gives service providers (ISPs) the
possibility to host multiple VPN end-customers on a shared Remote
Access Services (RAS) platform. Requires a license.
• Supports hosting of up to 250 public termination points for
end-customer SSL and IPsec VPNs.
• Secure VPN binding. Each VPN is bound to a private IP interface.
VLAN tagging can be used when private IP address spaces overlap.
Nortel VPN Gateway
User Guide
NN46120-104 02.01 Standard
14 April 2008
Copyright © 2007-2008 Nortel Networks
.