This tag is applied to questions related to various VPN types such as PPTP or IPSec.

learn more… | top users | synonyms

2
votes
1answer
155 views

Is the VPN provider's ISP able to spy on traffic?

Traffic between a VPN client and a VPN server is encrypted on the client, and decrypted on the server. As the VPN server passes that traffic through the internet, can the VPN server's ISP see that ...
0
votes
0answers
19 views

Hamachi as a way to access home vCal / vCard server - security risk?

I have a home server providing a way to sync contacts and calendars between my machines. Until now, I was using it only with computers in my LAN, but recently I need to sync a computer that is on ...
-1
votes
1answer
65 views

Concern about potential of VPN access being restricted in Italy

Background: I work a remote employee in the US for a US based company. I log into our company's intranet via VPN to work every day. I also connect to multiple client networks via VPN (as well as using ...
0
votes
1answer
54 views

Is bypassing my VPN and seeking my IP address hacking? [closed]

I used VPN service to hide my location. Program noticed that another program included inside the mediawiki I was editing is trying to bypass it and read my IP address. Is that allowed or is it hacking?...
1
vote
0answers
22 views

Information and Settings Collected from a PC Connected to a Web Server

1- What are the information and settings collected from my pc when I connect to a website server? 2- When I connect through a VPN, Could the website server detect a mismatch between my new location ...
-3
votes
1answer
56 views

Is there a way to get vpnbook passwords without going to the website? [closed]

I'm just wondering because it seems that it would be pretty obvious that I'm using a vpn if I go their website to get the new password every week. I'm fairly sure it's not illegal to use a vpn in my ...
1
vote
0answers
25 views

Azure Networking VPN

Company is exploring the option of connecting Azure VNET to the on premise network using either Site-to-Site or ExpressRoute. There are concerns regarding potential vulnerability of internal resources ...
9
votes
4answers
1k views

How to determine if a VPN provider respects data confidentiality?

I've read about why I really should use a VPN and I've been looking into different providers, but there's one thing I'm worried about. Can't a VPN provider just look at my traffic all they want and ...
0
votes
3answers
94 views

If I'm the owner of VPN network, what can my ISP see?

I'm planning to build small VPN network, so that me and my customers can connect and use it. But from my understanding, if I use my own VPN network, still my ISP can see the traffic, am I right? Here ...
7
votes
4answers
256 views

Bank website forwards to false site - formatted hard drive - still forwards

Summary: When I visit my bank's website, I get forwarded to a phishing mirror site. This has persisted through a re-format of my MacBook. Even on different browsers! Other computers on the same ...
0
votes
1answer
55 views

Possibility for Multi-layer VPN or queries through TOR? [duplicate]

If a user is to fingerprint a server via SQL injection and doesn't want the server to be able to trace back. Is the only way to use a proxy/VPN? Can queries and requests be sent through TOR network? ...
2
votes
2answers
498 views

Meterpreter session over VPN

I have the following situation: Attacker machine connected to a router with public IP assigned from ISP, forwarding enabled. Victim machine connected to another router, (obviously) different IP ...
0
votes
2answers
103 views

How can website server recognize incoming Tor or VPN connection? [duplicate]

I was trying to signup for a service provided by a website using Tor, the website prevented me and asked me to disable my proxy settings, he noticed me with the following: Our checks indicate that ...
1
vote
2answers
102 views

Certificate handling on a small network VPN

Background - I need to set up secure remote access for a small home office. I'm a bit of a noob and haven't needed to handle certificates before. I understand most of the setup but I want to ...
1
vote
1answer
118 views

How to pick an enterprise VPN provider?

We have always deployed our own VPN using an open source package, but as our company is growing we've become increasingly aware of the importance of scaling this solution, especially now we operate ...
3
votes
4answers
173 views

How can a network be secured against attacks coming from the inside?

(updated to (hopefully) be less broad) No matter how well one secures a network there's always the chance of an attacker gaining access. In a shared home + home office network (eg. for a remote ...
1
vote
1answer
94 views

VPN - Why is my NAT'ed Laptop being SSH-brute-forced by External IPs when in VPN?

I am using a commercial paid licence to a VPN provider, which I use on two boxes, a FreeBSD, and a Linux BackBox. When connected to this proxy, my interface receives a public IP from the VPN ...
-2
votes
1answer
166 views

Are VPNs for iPhones vulnerable to hacking?

I use VPNs all the time on my iPhone to get around websites being blocked and sometimes just for privacy, but are they secure? In this video the guy installed a certificate on the lady's phone that ...
5
votes
2answers
356 views

Setup a private VPN for family in China?

I have family in China. During the past weeks their internet connection was severely limited. VPNs such as Astrill and similar weren't working anymore. Is it possible to setup my own VPN (or ...
3
votes
3answers
107 views

VPN server in a router [closed]

I am new to using and configuring VPNs. I was thinking of setting up my router as an OpenVPN server, but as I understand that is to connect form the outside to my network. However, I want a connection ...
2
votes
0answers
29 views

What are the security risks of using public address schemes for the DHCP of your VPN'd Users?

At the company I work for we recently purchased a network scanning tool to help with asset inventory and overall PC network management. My supervisor, while looking at the different IP address ranges ...
6
votes
5answers
262 views

VPN with client certificate via managed PKI - where did private key come from?

$company allows Mac users to request a client certificate via Symantec PKI to connect to their SSL VPN server. This process involves going to a specific Symantec website (has some sort of ID to ...
1
vote
2answers
63 views

Does DirectAccess protect non corporate traffic on public wifi?

If I were connected to DirectAccess over public wifi, does this provide any measure of security for non-corporate resources, such as online banking? Would I be better served by going through ...
0
votes
0answers
52 views

What is the difference between traffic co-relation attack and timing attack?(with relation to VPN or TOR)

Till what I have understood of timing attack is that I send 5Mb request and my VPN also sends a 5Mb request(the adversary present at both the ends i.e my ISP and VPN's end,hence the adversary finding ...
0
votes
2answers
111 views

What's the best practice when using a VPN and a VM

I am currently on a virtual machine connected to the network via NAT. I wondered what's the best practice when I want to connect to a VPN. Should I connect to the VPN from my host OS or from my ...
0
votes
2answers
143 views

Is it safer to run my own VPN server at home?

I am looking to use a VPN server to prevent MiTM attacks associated with insecure network access points. Is it safer to run a VPN server at home over using someone else's VPN server or is it a waste ...
1
vote
4answers
244 views

How to know if accessing to a VPN service is safe and won't steal my data

I want to know if a VPN service is safe or not. If the VPN server itself can catch or sneak peek my data? Or as long as it is a VPN service, then the security is protected by the algorithm itself? ...
1
vote
2answers
167 views

Shared Office Network Security - VPNs, Firewalls, and systems

First, let me premise this post with the fact that I am completely new to network security. I have done a fair bit of reading up, but I am certainly by no means a professional. If anything I say here ...
1
vote
1answer
135 views

If I use my own cloud server as a VPN can my internet traffic be tracked?

If I use some IaaS cloud hosting provider to create my own VPN, and then I connect to that VPN before torrenting something, can I be identified in any way? I assume that when you spin up an instance ...
3
votes
1answer
87 views

VPN Authentication and Network Administrators

Is it possible for a network admin (or attacker) to monitor traffic sent to a VPN server during authentication and end up being able to decrypt the data as if they were the legitimate user? I don't ...
2
votes
2answers
67 views

Are there any benefits to using a semi-trusted network if a VPN is being used?

Let's say that I'm at Larry's Coffee Shop and they advertise that they have open WiFi. I open my laptop and find 2 open networks available, both called "Larry's Coffee". One of these is the authentic ...
0
votes
0answers
44 views

VPN and traffic filtering

VPN server assigns to the client public ip address and doesn't offer NAT function. In this case, can firewall on the client side to filter (inspect) VPN traffic (L2TP/IPSec, IKEv2, SSTP, OpenVPN)? I ...
1
vote
1answer
82 views

VPN to protect traffic from one server to a remote site

I need to install a server at a customer's site (Site A) that needs to communicate securely to a network at another site (Site B). The communication between Site A and Site B is over the internet. ...
0
votes
0answers
193 views

Gargoyle (OpenWRT) firewall routing for VPN

At present I have Gargoyle setup on my WNDR3700 to connection to a VPN provider in order to provide a little privacy. However this prevents me from connecting remotely to my home network. Previously I ...
2
votes
0answers
50 views

what are the advantages and disadvantages of using ipsec protocol, how vulnerable is it? [closed]

There are several ways through which the VPN can be applied, like SSL, TLS etc. But most of the VPN use IPSec. What kind vulnerabilities does ipsec possess?
43
votes
8answers
8k views

Can an open Wi-Fi hotspot be considered “secure” when using a VPN connection?

There are many open Wi-Fi hotspots scattered around from cafes to airports. I understand that a non-passworded Wi-Fi leaves traffic unencrypted and therefore available for hackers to read. I also ...
-1
votes
1answer
84 views

Can VPN,proxy servers and TOR evade/remove Browser Fingerprinting in terms of anonymity? [duplicate]

If not what are other ways to beat browser fingerprinting?Thank you.
2
votes
2answers
155 views

Is a vpn connection through a proxy more secure?

At the moment there are a number of online services (Hide my ass or PIA) that offer some type of security through an VPN connection. This of course can work, but the big problem (for me at least) ...
1
vote
1answer
61 views

Can an OpenVPN server track the client os type?

I was wondering when I connect to an OpenVPN server what kind of information can the server extract from my client? Obviously the server can detect my user-id, pwd, but can it detect: My vpn-client-...
3
votes
0answers
139 views

How do i know when IPSEC Phase 2 Has completed with Openswan?

When I bring up a connection using openswan I get the following output but I don't see any ESP traffic through ports 50, 500 or 4500. # ipsec auto --up globacom-vpn 104 "globacom-vpn" #44: ...
1
vote
3answers
375 views

How can I find an unauthorized/unknown proxy on my home network?

I recently started receiving an error while trying to stream netflix that I'm using a proxy. Exactly this error code here: https://help.netflix.com/en/node/277?ba=GSButtonClick&q= My problem is ...
1
vote
1answer
50 views

IPSec Host-to-Host VPN (RedHat) needs IP Forwarding?

We would like to build a Host-to-Host IPSec VPN (both RedHat Linux). Is it really mandatory to activate IP Forwarding, which is by default deactivated because of our security policy (/etc/sysctl.conf ...
0
votes
1answer
65 views

Remote VPN access and moving to the cloud

First of all, my question is related to Web Application security. Often when I want to suggest customers to move to the cloud for certain applications, I am being told that our customers are ...
0
votes
1answer
116 views

safe money transfer on open wifi VS vpn not allowed

sometimes I need to do money transfer on my windows tablet when I'm connected to an open wifi, but I noticed that some of them don't allow VPN services. This scares me, since I'm worried about ...
1
vote
1answer
251 views

Is ExpressVPN using hidden trackers? or spyware?

I have ExpressVPN installed and keep getting strange warnings from malwarebytes antimalware. First odd fact is that XVPND.exe is always running, even after a reboot. I have set ExpressVPN to not ...
2
votes
2answers
226 views

Risk to self-signed SSL certificate on OpenVPN server

I am building an OpenVPN server in AWS for my organization with a DNS record pointing it to vpn.myOrgnization.com. SIDE NOTE: We have recently migrated all of our SSL certificates over to the new (...
0
votes
2answers
88 views

Self-chosen fixed RSA PIN in addition to a Password

I'm using a Junos Pulse Secure Access Service (Juniper Networks), which requires to enter a RSA PIN in addition to the password. I don't know if this is always the case or if it's a custom ...
0
votes
1answer
67 views

Verifying that an Android banking app checks that the certificate is trusted

I have a closed source banking app on my unrooted Android phone. I'd like to verify the following: The app uses SSL to communicate with the server The app verifies that the SSL certificate of the ...
0
votes
1answer
113 views

Hiding using VPN

I have just connected to a vpn server in my University using Cisco AnyConnect. But when I check http://whatismyipaddress.com/, it still says that I'm in the same country as before I connected to the ...
1
vote
3answers
52 views

In using a VPN service is it possible to transmit data without giving away system configuration details?

In using a VPN service I want to feel comfortable in the knowledge that outsiders cant simply build up metadata on my browsing activities. The fact it is done is somewhat unsettling. I have spent days ...