This tag is applied to questions related to various VPN types such as PPTP or IPSec.

learn more… | top users | synonyms

2
votes
0answers
29 views

What are the security risks of using public address schemes for the DHCP of your VPN'd Users?

At the company I work for we recently purchased a network scanning tool to help with asset inventory and overall PC network management. My supervisor, while looking at the different IP address ranges ...
4
votes
2answers
3k views

IKEv2 vs OpenVPN

I want to ask you for information about the IKEv2 protocol for a VPN connection. I haven't found so much information on the web. I am interested especially regarding the usage on a mobile phone. Is it ...
2
votes
1answer
130 views

VPN and Unencrypted Protocols

I recently started subscribing to a VPN service, and to check that all traffic is in fact encrypted I used Wireshark. According to this page, the lower, right hand side should be gibberish (from this ...
0
votes
0answers
52 views

What is the difference between traffic co-relation attack and timing attack?(with relation to VPN or TOR)

Till what I have understood of timing attack is that I send 5Mb request and my VPN also sends a 5Mb request(the adversary present at both the ends i.e my ISP and VPN's end,hence the adversary finding ...
0
votes
2answers
109 views

What's the best practice when using a VPN and a VM

I am currently on a virtual machine connected to the network via NAT. I wondered what's the best practice when I want to connect to a VPN. Should I connect to the VPN from my host OS or from my ...
1
vote
4answers
243 views

How to know if accessing to a VPN service is safe and won't steal my data

I want to know if a VPN service is safe or not. If the VPN server itself can catch or sneak peek my data? Or as long as it is a VPN service, then the security is protected by the algorithm itself? ...
0
votes
2answers
142 views

Is it safer to run my own VPN server at home?

I am looking to use a VPN server to prevent MiTM attacks associated with insecure network access points. Is it safer to run a VPN server at home over using someone else's VPN server or is it a waste ...
1
vote
1answer
135 views

If I use my own cloud server as a VPN can my internet traffic be tracked?

If I use some IaaS cloud hosting provider to create my own VPN, and then I connect to that VPN before torrenting something, can I be identified in any way? I assume that when you spin up an instance ...
2
votes
2answers
67 views

Are there any benefits to using a semi-trusted network if a VPN is being used?

Let's say that I'm at Larry's Coffee Shop and they advertise that they have open WiFi. I open my laptop and find 2 open networks available, both called "Larry's Coffee". One of these is the authentic ...
4
votes
4answers
11k views

VPN tunnel inside other VPN tunnel

This question is kind of asked already but it was asked with different context: VPN tunnel in VPN tunnel Connect through two VPN clients http://superuser.com/questions/763433/tunnel-in-a-tunnel-...
0
votes
0answers
44 views

VPN and traffic filtering

VPN server assigns to the client public ip address and doesn't offer NAT function. In this case, can firewall on the client side to filter (inspect) VPN traffic (L2TP/IPSec, IKEv2, SSTP, OpenVPN)? I ...
43
votes
8answers
8k views

Can an open Wi-Fi hotspot be considered “secure” when using a VPN connection?

There are many open Wi-Fi hotspots scattered around from cafes to airports. I understand that a non-passworded Wi-Fi leaves traffic unencrypted and therefore available for hackers to read. I also ...
2
votes
0answers
50 views

what are the advantages and disadvantages of using ipsec protocol, how vulnerable is it? [closed]

There are several ways through which the VPN can be applied, like SSL, TLS etc. But most of the VPN use IPSec. What kind vulnerabilities does ipsec possess?
0
votes
0answers
188 views

Gargoyle (OpenWRT) firewall routing for VPN

At present I have Gargoyle setup on my WNDR3700 to connection to a VPN provider in order to provide a little privacy. However this prevents me from connecting remotely to my home network. Previously I ...
-1
votes
1answer
84 views
1
vote
2answers
131 views

Shrewsoft VPN client calling home?

I received a notification from my firewall software that Shrewsoft's latest VPN client (version 2.2.2, released 2013-07-01) appears to be calling home. The ipseca.exe file included with the client is ...
1
vote
1answer
61 views

Can an OpenVPN server track the client os type?

I was wondering when I connect to an OpenVPN server what kind of information can the server extract from my client? Obviously the server can detect my user-id, pwd, but can it detect: My vpn-client-...
3
votes
0answers
136 views

How do i know when IPSEC Phase 2 Has completed with Openswan?

When I bring up a connection using openswan I get the following output but I don't see any ESP traffic through ports 50, 500 or 4500. # ipsec auto --up globacom-vpn 104 "globacom-vpn" #44: ...
30
votes
6answers
4k views

How safe are employee laptops in China against International corporate espionage?

I recently took a business trip to China. Our IT department told me I could not take my normal machine, and instead gave me a loaner. This loaner had MS Outlook and was linked to my normal company e-...
1
vote
3answers
374 views

How can I find an unauthorized/unknown proxy on my home network?

I recently started receiving an error while trying to stream netflix that I'm using a proxy. Exactly this error code here: https://help.netflix.com/en/node/277?ba=GSButtonClick&q= My problem is ...
11
votes
5answers
69k views

If I use a VPN, who will resolve my DNS requests?

Will they be resolved by my VPN provider, or by my original ISP (if left on "automatic" settings)? Would I have to manually configure a dns server, to make sure my requests will not be resolved by my ...
0
votes
1answer
65 views

Remote VPN access and moving to the cloud

First of all, my question is related to Web Application security. Often when I want to suggest customers to move to the cloud for certain applications, I am being told that our customers are ...
0
votes
1answer
116 views

safe money transfer on open wifi VS vpn not allowed

sometimes I need to do money transfer on my windows tablet when I'm connected to an open wifi, but I noticed that some of them don't allow VPN services. This scares me, since I'm worried about ...
2
votes
2answers
223 views

Risk to self-signed SSL certificate on OpenVPN server

I am building an OpenVPN server in AWS for my organization with a DNS record pointing it to vpn.myOrgnization.com. SIDE NOTE: We have recently migrated all of our SSL certificates over to the new (...
0
votes
1answer
926 views

Is ExpressVPN using Taboola?

I am running on Windows 7, version pro. I have just started paying for the vpn service ExpressVPN. From that point, I noticed that ExpressVPN software was running a nssm.exe process (non-sucking ...
10
votes
2answers
30k views

How safe is it to connect to Internet through VPN?

Sometimes I connect to the Internet using a VPN connection to be able to access the blocked websites. I've got a few questions regarding this: Are my important data (like my credentials) vulnerable ...
0
votes
1answer
67 views

Verifying that an Android banking app checks that the certificate is trusted

I have a closed source banking app on my unrooted Android phone. I'd like to verify the following: The app uses SSL to communicate with the server The app verifies that the SSL certificate of the ...
0
votes
1answer
110 views

Hiding using VPN

I have just connected to a vpn server in my University using Cisco AnyConnect. But when I check http://whatismyipaddress.com/, it still says that I'm in the same country as before I connected to the ...
1
vote
1answer
126 views

AirVPN, DNS Leaks on Windows 8.1, but not Ubuntu

I've noticed when I visit dnsleaktest.com using Windows 8.1 & Chrome a bunch of UK IP addresses (Belonging to my ISP) are displayed alongside the Netherlands IP address I should be appearing as (...
3
votes
1answer
96 views

How to design a right VPN connection for an organisation (Interconnected MPLS link or Individual FW)

Thanks in advance for your advice We have to implement VPN connection for nearly 7 countries Option 1 : As we have private MPLS link to all 7 countries. It is been outsourced Third party. They ...
1
vote
3answers
52 views

In using a VPN service is it possible to transmit data without giving away system configuration details?

In using a VPN service I want to feel comfortable in the knowledge that outsiders cant simply build up metadata on my browsing activities. The fact it is done is somewhat unsettling. I have spent days ...
0
votes
2answers
173 views

Is there a security difference between remote desktop or VPN?

Is there any difference in security between browsing the internet on a remote desktop and using a VPN to browse the internet on a local machine? In this case assume both use the same encryption ...
2
votes
2answers
118 views

Would a VPN with changing configs do the same job as different VMs

I was reading this post: Can a website still detect my real MAC address even if I use different virtual machine each time I visit the website? So my question: Would using a VPN and swapping out ...
2
votes
1answer
139 views

How do VPN services in the US choose to comply with foreign law enforcement requests? [closed]

Imagine a user from Russia uses a VPN-service which obeys US jurisdiction. This user did violate Russian legislation and the violation is being investigated by Russian law enforcement. Let's assume ...
1
vote
0answers
83 views

Smoothwall is blocking the registration for my vpn [closed]

I don't have WiFi at my house, so I told my foster mom I would get a VPN app on my tablet. I'm on a kindle fire, and the app I picked is called VPN by private internet access. I have to use my high ...
0
votes
1answer
227 views

“Your connection is not private” when connected to work's server through VPN (Cisco AnyConnect SMC 3.1)

I'm trying to configure mother's personal computers (Win10) for remote work with server in FL. When I connect from her work laptop - using provided Cisco AnyConnect VPN 2.5 on Win7 - I can still ...
4
votes
1answer
59 views

Is there anything else than DNS leaks that I should be aware of while using VPN?

Is there anything else than DNS-leaks that I should be aware of while using VPN that could potentially leak my real IP address?
3
votes
3answers
162 views

Detection and monitoring of important events on OpenVPN server

If an attacker can establish a VPN connection to the company network and have access to internal resources (by getting various certificates and credentials used to authenticate to the VPN server), ...
0
votes
2answers
136 views

Using VPN on Android, Necessity of Rooting

I have just gotten a new phone and would like to protect my privacy better than I have in the past. I have read about rooting and then installing OrWall, OrBot, and OrWeb. If I understood correctly, ...
0
votes
3answers
1k views

vpn vs ssh, what to choose? [duplicate]

First of all i am noob in this area so came here to get some idea from the experts. My friend was telling me the other day that ssh is pretty secure protocol and one should not be worried about ...
3
votes
0answers
27 views

How to make my traffic go out of one VPN into another? [duplicate]

This question has been asked before a number of times, but I seek a more in-depth answer: The objective is to mitigate the risk of being identified, by setting up chained VPN services so that the VPN ...
192
votes
14answers
30k views

My college is forcing me to install their SSL certificate. How to protect my privacy?

My college administration is forcing us to install Cyberoam Firewall SSL certificate so that they can view all the encrypted traffic to "improve our security". If I don't install the certificate than ...
6
votes
3answers
2k views

What is the difference between encrypted data and data sent through an encrypted tunnel?

I am looking at different VPN protocols. L2TP does not provide encryption so require IPSec to encrypt the data IPSec tunnel provide encryption to the tunnel What is the difference in terms of the ...
1
vote
0answers
23 views

Why can't VPN extensions filter everything in the browser?

For example, when I'm using one of this extensions, such as ZenMate or Browsec, I'm not able to watch video streamings. Or another thing that happened is my internet provider detecting me going on a ...
13
votes
1answer
2k views

What's are the advantages of L2TP/IPSEC over plain IPSEC?

As the title says, my firewall (Sonicwall) can do either IPSEC or L2TP/IPSEC for VPN connections. One advantage of L2TP/IPSEC I can see is that the client computer get allocated its own IP address on ...
3
votes
1answer
77 views

Why L2TP is required over IPSec

IPsec facilitates encryption and authentication with ESP. With tunnel mode, IPSec is also providing tunnelling. More importantly, one can use IPsec in tunnel mode, along with transport mode (i.e. ...
3
votes
0answers
67 views

What's The Easiest Way To Maintain Remote Users Access to a Webapp

Here is a real world case: A chain of high schools (several hundreds) has many websites (~ 3x number of Schools) that are content driven by users (the students). Every school maintains about 2-4 ...
23
votes
2answers
41k views

How can I tunnel through an SSH server for application layer protocols such as HTTP/s and FTP?

Are there client programs that allow me to "tunnel" through my SSH enabled server for normal Internet requests such as HTTP(s)? If so what are they and can someone point me in the right direction? ...
6
votes
1answer
183 views

How far a VPN service is legal? Does it makes my data vunerable for hackers?

Today, in Brazil, the government suspended by judicial requirement the WhatsApp application for 48 hours. It is a messaging app that works only via Internet connection (3G, 4G, WiFi...) and not by ...
3
votes
3answers
209 views

What do browser VPNs actually do?

Firstly, I am not sure if this is the correct forum to be asking this question so I apologise if not. What I would like to know is, what do VPN browser plug-ins (such as zenmate) actually do and how ...