IPSecuritas 3.0rc review

IPSecuritas is an IPSec client with graphical user interface that allows easy setup of secure VPN connections over the internet.

License: Freeware OS: Mac OS X File size: 0K Developer: Lobotomo Software Price: $0.00 Updated: 15 Jan 2007

0

IPSecuritas is an IPSec client with graphical user interface that allows easy setup of secure VPN connections over the internet. IPSec is an official standard of the Internet Engineering Task Force and has been widely adopted by router and firewall manufacturers.

Here are some key features of "IPSecuritas":
Encryption: Cipheres your data using strong state-of-the-art algorithms, making it impossible to read your data for everybody but you.
Authenticaton: Digitally signs your information, assuring the identity of the sender.

What's New:
IPSecuritas 3.0 is a complete reimplementation from scratch with a better structure yet benefiting from experiences made with past versions.
It brings the following enhancements:
Universal Binary
IPSecuritas 3.0 runs natively on PPC and Intel (requires Mac OS X 10.3 or higher).
Profiles
Multiple profiles with different sets of connections can be defined to easily change settings depending on your location.
Multiple networks
Any number of networks can be defined in Host to Network and Network to Network modes.
NAT Traversal (NAT-T)
NAT-T according to IKE-Draft-02 and IKE-RFC.
XAUTH / Hybrid authentication
Extended Authentication in phase 1 with username and password.
Checkpoint Support
Checkpoint Username/Password authentication and Checkpoint UDP Encapsulation on port 2746 are now supported (be sure to enabled VPN-1 support in the application preferences).
Stay Connected Mode
IPSecuritas now detects network changes (change of IP address or default interface etc.) and reacts appropriatly to keep your connections alive. This way, IPSec can be left enabled regardless of your current environment.
Split DNS
DNS servers can be configured for each connection and domain (instead of the global DNS replacements in earlier releases).
IPv6
Experimental support for IPv6 - mainly untested.
Connection Import/Export
Connection definitions can be exported and imported, including their certificates. Exported definitions can be protected by a password.
Certificate Import/Export
PKCS#12, DER encoded and password protected PEM encoded certificates and private keys can be imported - export into PKCS#12, DER and PEM encoded files.
Protection
A connection definition can be protected (read-only, invisible, disallow export etc.) to give an administrator more control over the connections installed on client machines.
New GUI
Better handling of certificates, more information on connection status, display of configuration problems, better log display, log export
Various background enhancements
All kernel API now done without external helpers, network/configuration changes will now automatically restart the connections without user interaction, keep-alive pings to keep connections up and automatic restart of failed connections.

Requirements:
BSD subsystem installed.