a Virtual Private Network is a private network that is built upon a public network, typically using encryption for to secure the private communication.
3
votes
5answers
141 views
Does using ssl matter if I am connected using a VPN?
Say I have an internal server that I am using for source control. If I only access that server through a VPN connection, do I still need to have SSL setup on the source control server to ensure that ...
3
votes
1answer
602 views
I'm using a Cisco ASA as a VPN endpoint. Where do the VPN clients get firewalled?
(Is this too application specific? It seems like a reasonable question that would be useful to other people...)
So, I've got this ASA in front of a network that I didn't set up. It's been ...
3
votes
2answers
174 views
VPN Appliance Placement Options
I'm currently looking to implement a VPN solution (based on a Checkpoint Connectra) purely to provide remote access to staff (no site-to-site, or customer access), but the one design decision I can't ...
3
votes
3answers
257 views
Dedicated Server in Cloud Environment - SSL Remote Login vs Dedicated VPN
Thanks for taking your time to look into this question.
Background
I have my website hosted in a dedicated server in the cloud. The server is a Windows 2008 R2 machine. To publish I FTP files to ...
3
votes
2answers
1k views
When is it posible to sniff VPN traffic?
I have created a VPN service using Routing And Remote Services on Windows Server 2008 and I haven't configured any Server Network Policy yet. There is only one user for connecting to VPN and all of ...
3
votes
1answer
265 views
How can I tell if a PPTP tunnel is secure?
PPTP has been demonstrated to be broken in many ways, and most installations are insecure. But it is also theoretically not broken if configured correctly.
As an end-user, is there a simple way for ...
3
votes
2answers
894 views
Can remote LogMeIn Hamachi users access our local LAN?
Unknown to me, one of the kids has installed LogMeIn Hamachi on his PC so that he can access and play on his pal's Minecraft server, and vice versa.
However, my lack of fu when it comes to these ...
2
votes
3answers
440 views
How can I make it more difficult for a user to create multiple accounts?
I would like to know the best way to increase security on a website so that the a single user can't create multiple accounts.
What all of a user can be traced? I'm thinking:
IP address
Mac address
...
2
votes
2answers
416 views
How does VPN encryption work?
I've been searching and searching, but I can't seem to find a good-enough technical explanation. From what I've gathered, there are two "things" able to secure VPNs:
1) Pre-Shared Key: This handles ...
2
votes
3answers
118 views
Could I delete .csr files when the key is signed by CA
I'm creating my own openvpn server.
The Certificat authority is located on a separated host.
There is two kind of clients: which that just send a .csr and to which i send the .crt as an answer and ...
2
votes
4answers
378 views
HTTPS or HTTPS within VPN for WIFI security?
I read that HTTPS can be comprimised and is not as safe as you think. With a free VPN you have to put some trust in a free VPN server with your data, and surely your data from when it leaves the vpn ...
2
votes
2answers
2k views
Do VPNs provide sufficient protection over public wireless networks?
I know that VPNs are the standard way to secure communication between a remote user and their primary network, but I've never felt entirely comfortable relying on them when using an open wireless ...
2
votes
2answers
226 views
Test Android Secure Encrypted Traffic
For testing android traffic encryption I have configured a VPN client in my phone. What simple test I can perform in my home wifi network to verify that the traffic is really encrypted and secure?
2
votes
1answer
231 views
OpenVPN Why CBC mode is recommended?
I just set up my installation of OpenVPN on my server.
I am curious why the OpenVPN manual recommends CBC mode. I heard that CBC is predictable and not secure; is that true?
2
votes
3answers
397 views
Can a VPN decrypt my SSL traffic?
Are VPNs able to decrypt SSL traffic originating from my use of services such as Gmail, Dropbox and Skype, Google Talk and HTTPS-enabled websites? I'm asking because I always turn off these and other ...
2
votes
2answers
191 views
Filtering In Iran
Since many of you already know the Iranian government aggressively uses internet censorship to block sites such as facebook, flicker, bbc, etc.
The Iranian people use various methods to bypass ...
2
votes
3answers
76 views
Are intermediate signing certs the only secure+practical way to manage OpenVPN client certs?
My organization needs to issue (and revoke) OpenVPN client certificates for people working remotely.
Our system is based on a standard OpenSSL CA setup and the easy-rsa tools, and the whole directory ...
2
votes
2answers
114 views
Ordering of shared Phase 1/ISAKMP VPN policies
The various Phase 1 settings of a VPN tunnel policy are fairly well-established (encryption, hashing, DH group, lifetime), but in what order are they considered applicable to a more-secure tunnel?
I ...
2
votes
1answer
179 views
Is OpenVPN secure if both the certificate and private key, are publicly known?
My ISP is rubbish and the state of the internet in the UK seems to be heading to 1984. I've started looking at VPNs and stumbled on IPredator as a cheapy test.
It gives you the option of OpenVPN and ...
2
votes
1answer
471 views
Analyzing wireshark results (openvpn)
I signed up to Mullvad for VPN service, and manually run OpenVPN from my Linux box.
I rebooted my computer and make sure not to start any OpenVPN service. Yet when I did a Wireshark analysis I am ...
2
votes
1answer
509 views
ISP role with VPN & VPS?
I have notice online that many people get a VPN so that ISP can not view the sites you visit, create a profile of you and so on.
Reading How safe is it to connect to Internet through VPN?, Jonah ...
2
votes
1answer
73 views
IPSec AH + ESP used together
When ESP and AH are used together (ESP transport, AH transport) on the same packet does ESP encrypt the AH's hash, or is the hash left in the clear?
If the hash isn't encrypted, there are obviously ...
2
votes
4answers
205 views
Connect through two VPN clients
What exactly happens if I connect through two VPN clients on my laptop? For example, I connect using Cisco Any Connect, and then use another VPN client (such as HotSpot Shield or proXPN) to connect ...
2
votes
1answer
193 views
SSL VPN placement strategies
I wanted to know the advantages and disadvantages of placing an SSL VPN with respect to CIA in different locations:
with firewall
within the internal network
within the DMZ
Any reference also ...
2
votes
2answers
2k views
Does portforwarding present a risk to anonymity?
AirVPN by default has all ports closed but allows port-forwarding. I think this is required for P2P. Is this a threat to anonymity (e.g. would the person at the other end of the P2P transmission know ...
1
vote
3answers
324 views
Does the VPN provider know my dedicated IP?
Is it ok for a VPN provider to ask a new costumer to send a log file in order to solve a login probelm? I trusted him and sent him a log file because he said that would be the best way to see why i am ...
1
vote
3answers
1k views
How can I use a VPN to protect my privacy
How should I configure a VPN in order to access blocked websites and to hide my identity?
Usually I use SSH tunneling to protect my privacy and to escape censorship. I know nothing else about VPNs ...
1
vote
3answers
260 views
Client side scripts through proxies
If you're trying to hide your IP address using VPN/proxies can a website using client side scripting record your real ip? If yes is there any alternative to blocking all scripts as that breaks ...
1
vote
3answers
598 views
What utilities exist to brute force a username and password?
I'm trying to persuade management to purchase two factor authentication for securing VPN and terminal server access.
I've made significant progress by demoing TSGrinder, but would like to list other ...
1
vote
3answers
4k views
If I use a VPN, who will resolve my DNS requests?
Will they be resolved by my VPN provider, or by my original ISP (if left on "automatic" settings)? Would I have to manually configure a dns server, to make sure my requests will not be resolved by my ...
1
vote
2answers
168 views
Securing a VPN connection
I'm new to this
we want to install a new VPN connection that will be used to connect using Internet to some networks in the office
the contractor want to use a" Cisco NAC Network Module or Cisco IPS ...
1
vote
4answers
422 views
Can my company access my computer via the VPN?
The job I have requires that we have computers at home, a few years ago they had everyone install a VPN on our home personal computers (the company did not provide us with these computer) how safe if ...
1
vote
1answer
388 views
Can I used Google Authenticator with Radius and VMwareview
We're looking to add 2 factor and one of the options is google authenticator and I was wondering if we can attach that to a radius server attached to our VM infrastructure for remote access.
All ...
1
vote
1answer
287 views
What is a DNS leak?
I'm planning on getting a VPN service (probably Privateinternetaccess) and read that it is imperative to plug DNS leaks. The only information I found on google describing what these are is here and I ...
1
vote
1answer
304 views
What's most standard way to secure internet connections and protect privacy?
It's common knowledge that Wi-Fi, or other Internet connections, should be encrypted via a VPN to be secure, and to hide our real IP address from intermediary network observers. However, one can't ...
1
vote
1answer
927 views
What are the risks of removing ISATAP from the default global block list?
The process of installing Microsofts pseudo VPN called Direct Access requires me to remove the ISATAP name from the default global block list by running this command:
dnscmd /config ...
1
vote
3answers
533 views
Sniffing on VPN configuration
Our company wants to implement a service based on sniffing for security purposes, since we manage important information this requirement is imperative. The situation is as follows.
Everyone in the ...
1
vote
2answers
180 views
When connecting to internet through VPN what precautions should be taken?
I've read this similar question and it has some very good information. Can a site that has personal information about you be accessed by another site to determine who you are/where you are? For ...
1
vote
1answer
120 views
Can p2p use be traced by targeting a known individual rather than an offending IP Address?
My understanding of most filesharing lawsuits initiated by copyright holders is as follows:
The monitoring agency will connect to a torrent swarm and collect
the ip addresses of people downloading ...
1
vote
1answer
362 views
Is it secure to install RSA SecurID Software Tokens on the same computer that will be used to access the VPN?
My office switched from using the old hardware RSA SecurID key tokens to the RSA SecurID Software Tokens and most users have them installed on the same machines they use to access the VPN.
I asked ...
1
vote
2answers
349 views
Low level attacks on WLAN/LAN connection while connected to VPN
Is it really secure to connect to a (well-secured) VPN server over an unencrypted WLAN connection (or maybe a hotel Ethernet)?
I know, that there have been questions like this - but
I'm not asking ...
1
vote
1answer
561 views
Is there a difference between a VTI and a regular VPN tunneling process?
Is there a difference between a VTI (Virtual Tunnel Interface) and a regular VPN tunneling process?
Or have I got the whole concept wrong?
1
vote
3answers
186 views
What security protocols provide point-to-point confidentiality?
Am I right in thinking that VPN doesn't protect until you're out onto the external network (assuming you're connecting from within an internal network)? Or does VPN provide confidentiality from the ...
1
vote
2answers
407 views
Best practices for operating a Bitcoin-Qt client regarding netwok privacy?
As privacy is part of security, I know there is a Bitcoin SE here but they couldn't answer my question so I hope it's appropriate to ask it here.
I don't ask about how to secure my wallet on my ...
1
vote
1answer
189 views
How am I able to use Input Director when one machine is VPN'd into work?
So - I don't actually have a problem, but I'm really curious, because apparently VPN's don't work the way I thought they did.
It was my impression that when I VPN into my office, my computer is ...
0
votes
4answers
421 views
Protecting yourself from a malicious VPN
I am connecting to a VPN server that has been compromised and is under the complete control of an attacker. The virtual network itself contains numerous attackers waiting for a new target. What ...
0
votes
1answer
694 views
Is OpenVPN secure in this way?
I'm familiar with OpenVPN because my home router has a builtin OpenVPN server.
I would like to use OpenVPN all the time, but how do I deal with situations where I don't own the routers?
ex.: in a ...
0
votes
3answers
402 views
Can people use AES VPN tunnels to hide their activities from authorities?
I have read an article about programmers who use AES VPN tunnels when working remotely with clients from other countries. The article writes that this way their countries are unable to track their ...
0
votes
2answers
106 views
How do I ensure that a VPS host will keep my information private?
Basically, I want to use OpenVPN on a VPS to browse confidentially. However, I don't know much about VPS hosters and to me, it seems to be a hard choice because there are so many.
However, I think ...
0
votes
4answers
263 views
IPSec VPNs and symmetric keys
When dealing with IPSec based VPNs, I understand that there is a slight "problem" with symmetric key exchange. Obviously, you can't send the keys over the VPN, since they are used to guarantee the ...
