"With IPsec, all you can tell is that the session is up," Drewek says. "You can't see in detail what's happening."
Quad's IT team can use the SSL log to see when a user logs on, where that user goes and whether there has been an application failure. This data is useful in analyzing traffic that runs across the company's far-flung IP backbone, which includes more than 500 Windows 2003 servers and IBM AIX database servers, plus 4,000 Windows XP workstations and Macintosh computers at 45 sites around the country.
No Java, Mac
If you're a Mac user, beware. The NetScreen SA-3020 VPN system requires the latest version of Java, which isn't supported in Mac OS 9.0 or previous releases. Unfortunately, two Quad/ Graphics customers that needed access to the printing company's applications were running OS 9. Because the Mac-based customers couldn't use the VPN, Quad's IT team had to fashion them a secure Web connection using Whale Communications' E-Gap security appliance, enabling them to authenticate to the network and get to their applications.
Mac users are left out in the cold with Juniper's NetScreen SSL-based Secure Meeting appliance, too. Quad is testing the device, an internal WebEx-style meeting package for the VPN, as a possible means of reducing its WebEx costs. But while Secure Meeting supports Mac OS, Mac users can't actually share data in a Web meeting; they can only attend a Secure Meeting as passive participants.