Letting Remote Users in, though don't want passwords.

[stownsend]

I have a Pix 515 and I need to start to allow some home office users in.

I don’t want to use passwords for security to allow them access in, I'd like to install a Certificate or key on their PC that I can revoke at any time. I'm not too concerned with Data Encryption, as the data is not that critical.

I just need an easy way to let them in and to revoke their ability to get in at any notice. Passwords would be fine if they only worked on the one PC and the PC couldn't be changed to be another PC and have the other password work.

What would be the best way to implement this?

Thanks,

Scott<-

[p.krane]

You should talk to your Cisco design engineer to help you set it up with VPN and Certificates. You'll have to impliment IPSec to get the functionality you're looking for but it can't hurt to heve your data encrypted anyway.