a Virtual Private Network is a private network that is built upon a public network, typically using encryption for to secure the private communication.
3
votes
3answers
256 views
Dedicated Server in Cloud Environment - SSL Remote Login vs Dedicated VPN
Thanks for taking your time to look into this question.
Background
I have my website hosted in a dedicated server in the cloud. The server is a Windows 2008 R2 machine. To publish I FTP files to ...
2
votes
1answer
192 views
SSL VPN placement strategies
I wanted to know the advantages and disadvantages of placing an SSL VPN with respect to CIA in different locations:
with firewall
within the internal network
within the DMZ
Any reference also ...
0
votes
2answers
274 views
Is a VPN the only way to protect against rogue Wifi access points MITM attacks?
Given that it's very easy set up a rogue access point and MITM that connection, is a VPN to a trusted host the only real way to secure my browsing and other TCP/UDP actions?
This question relates to ...
4
votes
2answers
738 views
L2TP/IPsec shared secret: Can it be public?
My university provides a VPN service to gain access to internal services to all members. They are apparently using an L2TP/IPsec solution by Cisco.
I'm able to connect just fine, but I'm a bit ...
4
votes
4answers
451 views
How to keep secure while browsing on open wifi when SSL VPN is blocked?
After a recent visit to a hotel I was surprised to discover that they blocked access to my OpenVPN server. I often use this as a way to secure my internet traffic when I am on public wireless. ...
2
votes
2answers
2k views
Do VPNs provide sufficient protection over public wireless networks?
I know that VPNs are the standard way to secure communication between a remote user and their primary network, but I've never felt entirely comfortable relying on them when using an open wireless ...
1
vote
2answers
345 views
Low level attacks on WLAN/LAN connection while connected to VPN
Is it really secure to connect to a (well-secured) VPN server over an unencrypted WLAN connection (or maybe a hotel Ethernet)?
I know, that there have been questions like this - but
I'm not asking ...
2
votes
3answers
393 views
Can a VPN decrypt my SSL traffic?
Are VPNs able to decrypt SSL traffic originating from my use of services such as Gmail, Dropbox and Skype, Google Talk and HTTPS-enabled websites? I'm asking because I always turn off these and other ...
5
votes
4answers
561 views
Ways to monitor someone's internet traffic
If some authority for whatever reason decides they want to monitor your traffic on a wired DSL connection, how would they do it besides exploiting your OS? What are the other ways assuming the OS is ...
5
votes
1answer
269 views
What level of anonymity do VPNs provide?
When I use VPN is entire Internet usage protected or only some subset of traffic? For example,
Is my IMAP email provider only going to see VPN's IP address?
Is my DNS provider only going to see ...
2
votes
1answer
179 views
Is OpenVPN secure if both the certificate and private key, are publicly known?
My ISP is rubbish and the state of the internet in the UK seems to be heading to 1984. I've started looking at VPNs and stumbled on IPredator as a cheapy test.
It gives you the option of OpenVPN and ...
3
votes
2answers
883 views
Can remote LogMeIn Hamachi users access our local LAN?
Unknown to me, one of the kids has installed LogMeIn Hamachi on his PC so that he can access and play on his pal's Minecraft server, and vice versa.
However, my lack of fu when it comes to these ...
13
votes
4answers
689 views
IPsec (Internet Protocol Security) facts
Internet Protocol Security (IPsec) is a successor of the ISO standard Network Layer Security Protocol (NLSP). What are the advantages, disadvantages, other interesting facts regarding the protocol?
5
votes
4answers
7k views
Multiple VPN clients in parallel
If I were to run more than one VPN clients on my machine, simultaneously, what risks would be involved?
E.g. are there technical conflicts, such that it wouldn't work right?
Could there be ...
2
votes
1answer
469 views
Analyzing wireshark results (openvpn)
I signed up to Mullvad for VPN service, and manually run OpenVPN from my Linux box.
I rebooted my computer and make sure not to start any OpenVPN service. Yet when I did a Wireshark analysis I am ...
2
votes
2answers
409 views
How does VPN encryption work?
I've been searching and searching, but I can't seem to find a good-enough technical explanation. From what I've gathered, there are two "things" able to secure VPNs:
1) Pre-Shared Key: This handles ...
0
votes
1answer
111 views
Is there a router that acts as a VPN to get into the network but also sends traffic out through a VPN?
I have several servers that I want to lock down so they're only assessable from inside the network so I need a router that allows me to VPN in. On top of that I want certain ports(22,8022) from my ...
1
vote
2answers
168 views
Securing a VPN connection
I'm new to this
we want to install a new VPN connection that will be used to connect using Internet to some networks in the office
the contractor want to use a" Cisco NAC Network Module or Cisco IPS ...
2
votes
3answers
436 views
How can I make it more difficult for a user to create multiple accounts?
I would like to know the best way to increase security on a website so that the a single user can't create multiple accounts.
What all of a user can be traced? I'm thinking:
IP address
Mac address
...
2
votes
1answer
504 views
ISP role with VPN & VPS?
I have notice online that many people get a VPN so that ISP can not view the sites you visit, create a profile of you and so on.
Reading How safe is it to connect to Internet through VPN?, Jonah ...
0
votes
1answer
101 views
VPS logging issues?
So people recommend a VPS (cloud) offshore, in order to ensure that a VPN provider is not logging or doing anything malicious.
But isn't VPN provider = VPS hosting company? There is still a third ...
1
vote
3answers
258 views
Client side scripts through proxies
If you're trying to hide your IP address using VPN/proxies can a website using client side scripting record your real ip? If yes is there any alternative to blocking all scripts as that breaks ...
0
votes
3answers
400 views
Can people use AES VPN tunnels to hide their activities from authorities?
I have read an article about programmers who use AES VPN tunnels when working remotely with clients from other countries. The article writes that this way their countries are unable to track their ...
3
votes
2answers
220 views
Would our company system be more secure using a VPN?
I'm currently building a back-office system for our company [for internal use] that will manage our customers, accounts etc (not interested in don't reinvent the wheel comments today, thank you!). I'm ...
3
votes
4answers
321 views
What's the safest way to access my US-based bank's website from within Mexico? VPN vs SSH vs HTTPS?
I will soon be moving to Mexico and living there for an extended period. During that time I will need to occasionally access my US-based bank's website. I'll always be connecting using my own laptop, ...
1
vote
3answers
4k views
If I use a VPN, who will resolve my DNS requests?
Will they be resolved by my VPN provider, or by my original ISP (if left on "automatic" settings)? Would I have to manually configure a dns server, to make sure my requests will not be resolved by my ...
1
vote
1answer
188 views
How am I able to use Input Director when one machine is VPN'd into work?
So - I don't actually have a problem, but I'm really curious, because apparently VPN's don't work the way I thought they did.
It was my impression that when I VPN into my office, my computer is ...
6
votes
4answers
695 views
Security considerations in providing VPN access to non-company issued computers
There have been a few people at my office that have requested the installation of DropBox on their computers to synchronize files so they can work on them at home. I have always been wary about cloud ...
1
vote
1answer
900 views
What are the risks of removing ISATAP from the default global block list?
The process of installing Microsofts pseudo VPN called Direct Access requires me to remove the ISATAP name from the default global block list by running this command:
dnscmd /config ...
4
votes
4answers
993 views
Encryption laws in India — is it allowed to use ssh and VPN?
I have a very similar question to the one asked here (regarding Iran). However, I would like to use ssh and vpn while being in India. I found already this survey of cryptographic laws but I don't ...
7
votes
2answers
470 views
What information is exposed by simply opening an RDP connection to the internet?
Microsoft, Rackspace and other hosted providers allows people to RDP into that server.
Here are a few examples: Microsoft has something called "Azure Connect" it is very easy to expose a domain ...
0
votes
0answers
225 views
Using more multiple VPN client's to connect to the same CISCO ASA VPN client connection [closed]
I am currently using CISCO VPN client in a Read Hat Linux machine to connect to a CISCO ASA.
I am planing to connect another LINUX maching to the same ASA using the CISCO VPN client.
Does any ...
5
votes
3answers
849 views
Why does OpenVPN require securely sharing certs with clients?
The ubuntu docs on OpenVPN have this part in the instructions:
Copy the following files to the client:
/etc/openvpn/ca.crt
/etc/openvpn/easy-rsa/keys/hostname.crt
...
3
votes
2answers
172 views
VPN Appliance Placement Options
I'm currently looking to implement a VPN solution (based on a Checkpoint Connectra) purely to provide remote access to staff (no site-to-site, or customer access), but the one design decision I can't ...
3
votes
5answers
241 views
Securing data transfer between public network and personal accounts
I would be traveling soon and I am looking for all kinds of ways to encrypt the data transfer (usernames, passwords, emails ...) between the new networks to which I will connect my Laptop, that is ...
1
vote
1answer
552 views
Is there a difference between a VTI and a regular VPN tunneling process?
Is there a difference between a VTI (Virtual Tunnel Interface) and a regular VPN tunneling process?
Or have I got the whole concept wrong?
1
vote
3answers
1k views
How can I use a VPN to protect my privacy
How should I configure a VPN in order to access blocked websites and to hide my identity?
Usually I use SSH tunneling to protect my privacy and to escape censorship. I know nothing else about VPNs ...
5
votes
4answers
2k views
Prevent network users from creating an unauthorized outgoing VPN connection to avoid network policies
Is it possible to prevent network users from creating unauthorized outgoing VPN connections to avoid network policies?
Edit- What is the best way to detect unauthorized outgoing VPN connections while ...
9
votes
1answer
768 views
If an attacker is intercepting all of my traffic, will he be able to listen on my VPN session?
If I am a remote user, connecting to my firm from home, using IPSec VPN tunnel or through SSL, and an attacker is intercepting all of my traffic, will he be able to watch my VPN session on the clear ...
3
votes
3answers
3k views
Understanding VPNs : How VPNs can be used for anonymization?
Previously, I asked the question Why is it difficult to catch “Anonymous” or “Lulzsec” (groups)? I understood every answer except the VPN thing. Its because I never knew what VPNs were. Any how that ...
7
votes
3answers
456 views
Public wifi security protocols
I should apologise first- this post could seem a lot to ask for, but I am starting to go around in circles. I am interested in securing my laptop for when I use public wireless hotspots, as I am a ...
1
vote
3answers
186 views
What security protocols provide point-to-point confidentiality?
Am I right in thinking that VPN doesn't protect until you're out onto the external network (assuming you're connecting from within an internal network)? Or does VPN provide confidentiality from the ...
0
votes
1answer
482 views
Protecting yourself against DNS spoofing?
Are there any things which the user can do, on their own machine, to protect against DNS spoofing? I was just thinking when I was at the airport last and I wanted to check my email I used a hotspot ...
4
votes
2answers
8k views
How safe is it to connect to Internet through VPN?
Sometimes I connect to internet using a VPN connection to be able to access the blocked websites. I've got a few questions regarding this:
Are my important data (like my credentials) vulnerable to ...
1
vote
3answers
591 views
What utilities exist to brute force a username and password?
I'm trying to persuade management to purchase two factor authentication for securing VPN and terminal server access.
I've made significant progress by demoing TSGrinder, but would like to list other ...
7
votes
2answers
1k views
3DES vs DES for VPN connections
I'm trying to get Android 2.1 phones to connect to our corporate VPN, but it would appear they only support DES rather than 3DES for encryption.
Is it safe to use DES, am I going to get hacked if I ...
6
votes
4answers
624 views
How to tunnel all network communication?
I'm looking for a way to tunnel all network communication from my laptop through another computer. I can control the software on both the laptop and the computer. The connection between them should be ...
0
votes
1answer
689 views
Is OpenVPN secure in this way?
I'm familiar with OpenVPN because my home router has a builtin OpenVPN server.
I would like to use OpenVPN all the time, but how do I deal with situations where I don't own the routers?
ex.: in a ...
5
votes
1answer
578 views
What is important when selecting a VPN provider?
I am new to using a VPN service and came across the past at How do I pick a VPN provider? however am unsure if I need to use a personal VPN service or if OpenVPN fits my needs which are as follows;
...
3
votes
2answers
1k views
When is it posible to sniff VPN traffic?
I have created a VPN service using Routing And Remote Services on Windows Server 2008 and I haven't configured any Server Network Policy yet. There is only one user for connecting to VPN and all of ...
