This tag is applied to questions related to various VPN types such as PPTP or IPSec.

learn more… | top users | synonyms

9
votes
4answers
1k views

How to determine if a VPN provider respects data confidentiality?

I've read about why I really should use a VPN and I've been looking into different providers, but there's one thing I'm worried about. Can't a VPN provider just look at my traffic all they want and ...
0
votes
3answers
84 views

If I'm the owner of VPN network, what can my ISP see?

I'm planning to build small VPN network, so that me and my customers can connect and use it. But from my understanding, if I use my own VPN network, still my ISP can see the traffic, am I right? Here ...
7
votes
4answers
255 views

Bank website forwards to false site - formatted hard drive - still forwards

Summary: When I visit my bank's website, I get forwarded to a phishing mirror site. This has persisted through a re-format of my MacBook. Even on different browsers! Other computers on the same ...
0
votes
1answer
50 views

Possibility for Multi-layer VPN or queries through TOR? [duplicate]

If a user is to fingerprint a server via SQL injection and doesn't want the server to be able to trace back. Is the only way to use a proxy/VPN? Can queries and requests be sent through TOR network? ...
2
votes
2answers
326 views

Meterpreter session over VPN

I have the following situation: Attacker machine connected to a router with public IP assigned from ISP, forwarding enabled. Victim machine connected to another router, (obviously) different IP ...
0
votes
2answers
94 views

How can website server recognize incoming Tor or VPN connection? [duplicate]

I was trying to signup for a service provided by a website using Tor, the website prevented me and asked me to disable my proxy settings, he noticed me with the following: Our checks indicate that ...
1
vote
2answers
96 views

Certificate handling on a small network VPN

Background - I need to set up secure remote access for a small home office. I'm a bit of a noob and haven't needed to handle certificates before. I understand most of the setup but I want to ...
1
vote
1answer
116 views

How to pick an enterprise VPN provider?

We have always deployed our own VPN using an open source package, but as our company is growing we've become increasingly aware of the importance of scaling this solution, especially now we operate ...
3
votes
4answers
166 views

How can a network be secured against attacks coming from the inside?

(updated to (hopefully) be less broad) No matter how well one secures a network there's always the chance of an attacker gaining access. In a shared home + home office network (eg. for a remote ...
1
vote
1answer
84 views

VPN - Why is my NAT'ed Laptop being SSH-brute-forced by External IPs when in VPN?

I am using a commercial paid licence to a VPN provider, which I use on two boxes, a FreeBSD, and a Linux BackBox. When connected to this proxy, my interface receives a public IP from the VPN ...
-2
votes
1answer
158 views

Are VPNs for iPhones vulnerable to hacking?

I use VPNs all the time on my iPhone to get around websites being blocked and sometimes just for privacy, but are they secure? In this video the guy installed a certificate on the lady's phone that ...
5
votes
2answers
264 views

Setup a private VPN for family in China?

I have family in China. During the past weeks their internet connection was severely limited. VPNs such as Astrill and similar weren't working anymore. Is it possible to setup my own VPN (or ...
2
votes
0answers
29 views

What are the security risks of using public address schemes for the DHCP of your VPN'd Users?

At the company I work for we recently purchased a network scanning tool to help with asset inventory and overall PC network management. My supervisor, while looking at the different IP address ranges ...
6
votes
5answers
246 views

VPN with client certificate via managed PKI - where did private key come from?

$company allows Mac users to request a client certificate via Symantec PKI to connect to their SSL VPN server. This process involves going to a specific Symantec website (has some sort of ID to ...
1
vote
2answers
52 views

Does DirectAccess protect non corporate traffic on public wifi?

If I were connected to DirectAccess over public wifi, does this provide any measure of security for non-corporate resources, such as online banking? Would I be better served by going through ...
0
votes
0answers
47 views

What is the difference between traffic co-relation attack and timing attack?(with relation to VPN or TOR)

Till what I have understood of timing attack is that I send 5Mb request and my VPN also sends a 5Mb request(the adversary present at both the ends i.e my ISP and VPN's end,hence the adversary finding ...
0
votes
2answers
86 views

What's the best practice when using a VPN and a VM

I am currently on a virtual machine connected to the network via NAT. I wondered what's the best practice when I want to connect to a VPN. Should I connect to the VPN from my host OS or from my ...
0
votes
2answers
136 views

Is it safer to run my own VPN server at home?

I am looking to use a VPN server to prevent MiTM attacks associated with insecure network access points. Is it safer to run a VPN server at home over using someone else's VPN server or is it a waste ...
1
vote
4answers
215 views

How to know if accessing to a VPN service is safe and won't steal my data

I want to know if a VPN service is safe or not. If the VPN server itself can catch or sneak peek my data? Or as long as it is a VPN service, then the security is protected by the algorithm itself? ...
1
vote
2answers
147 views

Shared Office Network Security - VPNs, Firewalls, and systems

First, let me premise this post with the fact that I am completely new to network security. I have done a fair bit of reading up, but I am certainly by no means a professional. If anything I say here ...
1
vote
1answer
122 views

If I use my own cloud server as a VPN can my internet traffic be tracked?

If I use some IaaS cloud hosting provider to create my own VPN, and then I connect to that VPN before torrenting something, can I be identified in any way? I assume that when you spin up an instance ...
3
votes
1answer
87 views

VPN Authentication and Network Administrators

Is it possible for a network admin (or attacker) to monitor traffic sent to a VPN server during authentication and end up being able to decrypt the data as if they were the legitimate user? I don't ...
2
votes
2answers
65 views

Are there any benefits to using a semi-trusted network if a VPN is being used?

Let's say that I'm at Larry's Coffee Shop and they advertise that they have open WiFi. I open my laptop and find 2 open networks available, both called "Larry's Coffee". One of these is the authentic ...
0
votes
0answers
43 views

VPN and traffic filtering

VPN server assigns to the client public ip address and doesn't offer NAT function. In this case, can firewall on the client side to filter (inspect) VPN traffic (L2TP/IPSec, IKEv2, SSTP, OpenVPN)? I ...
1
vote
1answer
69 views

VPN to protect traffic from one server to a remote site

I need to install a server at a customer's site (Site A) that needs to communicate securely to a network at another site (Site B). The communication between Site A and Site B is over the internet. ...
0
votes
0answers
148 views

Gargoyle (OpenWRT) firewall routing for VPN

At present I have Gargoyle setup on my WNDR3700 to connection to a VPN provider in order to provide a little privacy. However this prevents me from connecting remotely to my home network. Previously I ...
2
votes
0answers
48 views

what are the advantages and disadvantages of using ipsec protocol, how vulnerable is it? [closed]

There are several ways through which the VPN can be applied, like SSL, TLS etc. But most of the VPN use IPSec. What kind vulnerabilities does ipsec possess?
43
votes
9answers
8k views

Can an open Wi-Fi hotspot be considered “secure” when using a VPN connection?

There are many open Wi-Fi hotspots scattered around from cafes to airports. I understand that a non-passworded Wi-Fi leaves traffic unencrypted and therefore available for hackers to read. I also ...
-1
votes
1answer
82 views

Can VPN,proxy servers and TOR evade/remove Browser Fingerprinting in terms of anonymity? [duplicate]

If not what are other ways to beat browser fingerprinting?Thank you.
2
votes
2answers
135 views

Is a vpn connection through a proxy more secure?

At the moment there are a number of online services (Hide my ass or PIA) that offer some type of security through an VPN connection. This of course can work, but the big problem (for me at least) ...
1
vote
1answer
56 views

Can an OpenVPN server track the client os type?

I was wondering when I connect to an OpenVPN server what kind of information can the server extract from my client? Obviously the server can detect my user-id, pwd, but can it detect: My vpn-client-...
3
votes
0answers
97 views

How do i know when IPSEC Phase 2 Has completed with Openswan?

When I bring up a connection using openswan I get the following output but I don't see any ESP traffic through ports 50, 500 or 4500. # ipsec auto --up globacom-vpn 104 "globacom-vpn" #44: ...
1
vote
3answers
318 views

How can I find an unauthorized/unknown proxy on my home network?

I recently started receiving an error while trying to stream netflix that I'm using a proxy. Exactly this error code here: https://help.netflix.com/en/node/277?ba=GSButtonClick&q= My problem is ...
1
vote
1answer
43 views

IPSec Host-to-Host VPN (RedHat) needs IP Forwarding?

We would like to build a Host-to-Host IPSec VPN (both RedHat Linux). Is it really mandatory to activate IP Forwarding, which is by default deactivated because of our security policy (/etc/sysctl.conf ...
0
votes
1answer
63 views

Remote VPN access and moving to the cloud

First of all, my question is related to Web Application security. Often when I want to suggest customers to move to the cloud for certain applications, I am being told that our customers are ...
0
votes
1answer
106 views

safe money transfer on open wifi VS vpn not allowed

sometimes I need to do money transfer on my windows tablet when I'm connected to an open wifi, but I noticed that some of them don't allow VPN services. This scares me, since I'm worried about ...
1
vote
1answer
203 views

Is ExpressVPN using hidden trackers? or spyware?

I have ExpressVPN installed and keep getting strange warnings from malwarebytes antimalware. First odd fact is that XVPND.exe is always running, even after a reboot. I have set ExpressVPN to not ...
2
votes
2answers
182 views

Risk to self-signed SSL certificate on OpenVPN server

I am building an OpenVPN server in AWS for my organization with a DNS record pointing it to vpn.myOrgnization.com. SIDE NOTE: We have recently migrated all of our SSL certificates over to the new (...
0
votes
2answers
77 views

Self-chosen fixed RSA PIN in addition to a Password

I'm using a Junos Pulse Secure Access Service (Juniper Networks), which requires to enter a RSA PIN in addition to the password. I don't know if this is always the case or if it's a custom ...
0
votes
1answer
62 views

Verifying that an Android banking app checks that the certificate is trusted

I have a closed source banking app on my unrooted Android phone. I'd like to verify the following: The app uses SSL to communicate with the server The app verifies that the SSL certificate of the ...
0
votes
1answer
101 views

Hiding using VPN

I have just connected to a vpn server in my University using Cisco AnyConnect. But when I check http://whatismyipaddress.com/, it still says that I'm in the same country as before I connected to the ...
1
vote
3answers
49 views

In using a VPN service is it possible to transmit data without giving away system configuration details?

In using a VPN service I want to feel comfortable in the knowledge that outsiders cant simply build up metadata on my browsing activities. The fact it is done is somewhat unsettling. I have spent days ...
2
votes
1answer
119 views

How do VPN services in the US choose to comply with foreign law enforcement requests? [closed]

Imagine a user from Russia uses a VPN-service which obeys US jurisdiction. This user did violate Russian legislation and the violation is being investigated by Russian law enforcement. Let's assume ...
1
vote
1answer
118 views

AirVPN, DNS Leaks on Windows 8.1, but not Ubuntu

I've noticed when I visit dnsleaktest.com using Windows 8.1 & Chrome a bunch of UK IP addresses (Belonging to my ISP) are displayed alongside the Netherlands IP address I should be appearing as (...
1
vote
0answers
77 views

Smoothwall is blocking the registration for my vpn [closed]

I don't have WiFi at my house, so I told my foster mom I would get a VPN app on my tablet. I'm on a kindle fire, and the app I picked is called VPN by private internet access. I have to use my high ...
0
votes
1answer
214 views

“Your connection is not private” when connected to work's server through VPN (Cisco AnyConnect SMC 3.1)

I'm trying to configure mother's personal computers (Win10) for remote work with server in FL. When I connect from her work laptop - using provided Cisco AnyConnect VPN 2.5 on Win7 - I can still ...
4
votes
1answer
58 views

Is there anything else than DNS leaks that I should be aware of while using VPN?

Is there anything else than DNS-leaks that I should be aware of while using VPN that could potentially leak my real IP address?
2
votes
1answer
122 views

VPN and Unencrypted Protocols

I recently started subscribing to a VPN service, and to check that all traffic is in fact encrypted I used Wireshark. According to this page, the lower, right hand side should be gibberish (from this ...
3
votes
3answers
142 views

Detection and monitoring of important events on OpenVPN server

If an attacker can establish a VPN connection to the company network and have access to internal resources (by getting various certificates and credentials used to authenticate to the VPN server), ...
0
votes
2answers
110 views

Using VPN on Android, Necessity of Rooting

I have just gotten a new phone and would like to protect my privacy better than I have in the past. I have read about rooting and then installing OrWall, OrBot, and OrWeb. If I understood correctly, ...