NCP Secure Entry Client for communication with any IPSec gateway (compatibility list at http://www.ncp.de). It supports all transmission networks like ISDN, the analog network, xDSL, Internet, GSM, GPRS, IMTS, LAN, WLAN, and it runs under all Windows operating systems. A permanently integrated Personal Firewall shields the PC against attacks in all communication environments. All security mechanisms are already active when the system starts and they remain active until the Entry Client is deactivated. IP-NAT, Stateful Packet Inspection, defined filter rules, Friendly Net, and hotspot detection (automatic detection of the current network environment and activation of the corresponding filter rules). Authentication relative to the destination gateway can be executed via OTP tokens or certificates (soft certificates, smart cards, USB tokens) in a PKI, at your discretion. All data are encrypted for transmission. Support for: Triple DES 128, 192-bit, Blowfish 128-bit, AES 128, 192, 256-bit, and RSA 1024, 2048-bit. The Entry Client can also be implemented in IT environments without permanent IP addresses. DynDNS (Dynamic DNS) is used to dial-in to the central VPN gateway with changing public IP addresses which are queried via a public DynDNS server (prerequisite: the destination gateway must support DynDNS). As an alternative to the Microsoft RAS dialer the Entry Client has its own dialer which is operating-system independent. It offers the following advantages: telephone charge savings, handover and optimization of central VPN resources through intelligent Short Hold Mode, remote administration, and protection from outside dialers.