VPN clients for mobile devices

Please let others know how useful this tip is via the rating scale at the end of it. Do you have a useful Lotus Notes, Domino, Workplace or WebSphere tip or code snippet to share? Submit it to our tip contest and you could win a prize.

In the traditional sense, IPsec was the predominant software used to enable VPN tunnels from a client to a VPN server in order to provide VPN connectivity. There are multitudes of VPN clients in the market for personal computers that support Windows operating systems. However, this is not the type of client I want to discuss in this article.

The industry is evolving to next generation mobility. My definition of "next generation mobility" is "the ability to have data and voice services anywhere, any time, with a single client device." This capability is offered in a limited capacity today through several vendors (Motorola, Avaya and Sprint), but the technology is in its infancy and most enterprise organizations are just beginning to think about utilizing the technology.

The ability to offer voice and data on a single client with ubiquitous access is indeed a novel concept. Technology-wise this can be done, but the same issues and challenges are present. Like the legacy VPN solutions, if an enterprise is looking at utilization of a client for mobility and access, then the data on that client must be secured as it traverses the airwaves. So how does one go about securing the data? The answer is relatively straightforward -- the client that is used to interconnect to the network must support some form of encryption. Federal regulations have driven corporate standards to require encryption of a company's data.

Today's cellular companies are offering data (primarily e-mail) capabilities via their phones. Examples of this are the BlackBerry and PalmTREO from Cingular. Both of these clients support both voice and data connectivity over Cingular's GSM network. The TREO suppor

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT E-mail Secure Lotus Notes/Domino 8.x from mail to unknown recipients Domino server setting and email policy tricks admins must know Top 10 Lotus Notes/Domino administration tips of 2008 Can Lotus Notes/Domino and Microsoft SharePoint play nice together? Using Formula language code to sort Lotus Notes messages by subject LotusScript action button manages Lotus Notes mail files Exploring Lotus Notes Domino 8.0.1 and beyond LotusScript agent moves tagged spam email to junk mail folder Send SMS text messages between Lotus Notes 7 and mobile devices Update to Exchange Server 2003 Connector for Lotus Notes Lotus Notes Domino Data Management and Storage How and why to change replica IDs during a Lotus Notes Domino upgrade How to fix the Lotus Notes unread documents feature Pen testing your VPN Top 10 best practices for e-mail archiving Sending specific agent errors to a mailbox instead of debugging Analysis: Will IBM buy BI? Application for queueing non-delivery reports on hub mail server Create print preview button, save paper when printing in iNotes Can Domino collect mail from Web, then distribute to LAN Notes clients? 'Young' servers could lead to spending freeze Lotus Notes Domino Policy Management IT governance in an IBM Lotus software environment Pen testing your VPN Restraining the monsters behind Lotus Notes' 'Full Access Administrator' Getting past expired IDs Creating a single sign-on for .NET and Lotus Notes Setting corporate mail file size policies on NSF files Why hidden paragraphs on a form are not a real security measure Encryption and privacy in Lotus Notes Domino E-mail authentication: Holy Grail or lost cause? Can Lotus Notes leverage domain authentication?

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

ts enterprise mail via the Xpress mail VPN solution and BlackBerry supports e-mail via the Blackberry enterprise VPN solution. In both cases, this is a VPN client/server solution that provides a seamless VPN solution for e-mail, utilizing push technology that is always on (you don't have to log in every time).

However, these clients are enabled for e-mail only. In the event that other data services are needed, you will actually need to install a secondary VPN client. This is where it gets confusing. BlackBerry touts that their e-mail solution will also support data. TREO supports the ability to load external VPN clients to support this capability. It would appear at first glance that the BlackBerry VPN solution is the way to go, as there is no need to purchase and load an external VPN client (and server at the host site). However, BlackBerry does not guarantee this capability and even has a disclaimer indicating that additional application development may be required. This is very important when looking at VPN support on a mobile client.

In a nutshell, secure corporate data communications from a handheld is basically no different than VPN connectivity from a PC today. However, these technologies are rapidly emerging and the potential is for the ubiquitous mobile device supporting both voice and data from one client. Caution must be used when evaluating these technologies and a proof of concept is highly recommended.

About the author:
Robbie Harrell (CCIE#3873) is the National Practice Lead for Advanced Infrastructure Solutions for SBC Communications. He has over ten years of experience providing strategic, business and technical consulting services. Robbie resides in Atlanta, and is a graduate of Clemson University. His background includes positions as a Principal Architect at International Network Services, Lucent, Frontway and Callisma.

This tip originally appeared on SearchMobileComputing.com.

I agree whole-heartedly with you. I have sales people who want to access our systems via BlackBerry , but we could not get it to work via our Citrix servers. I gave some of them laptops with Sprint cards and we are using MCI's Access Manager and the Cisco VPN client.
—Chuck A.

Do you have comments on this tip? Let us know.

Rate this Tip To rate tips, you must be a member of SearchDomino.com. Register now to start rating these tips. Log in if you are already a member. Submit a Tip DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.