Given recent discussion on this list about using SSH (for VPN access), this document from NIST may be of interest: http://csrc.nist.gov/publications/drafts/nistir-7966/nistir_7966_draft.pdf Found via: http://www.theregister.co.uk/2014/08/25/nist_to_sysadmins_clean_up_your_ssh_mess/ Bill Bogstad