a Virtual Private Network is a private network that is built upon a public network, typically using encryption for to secure the private communication.

learn more… | top users | synonyms

3
votes
1answer
104 views

BYOD - Looking for Secure means of Wiping Data Remotely

We are in the process of implementing a Bring Your Own Device policy to allow our many employees to use their personal laptops and desktops (Windows platform) to VPN into our company's network. These ...
3
votes
1answer
2k views

Setup of Kali Linux for reverse shell connections over the internet

I am running Kali Linux as a VM on my Windows machine which is NAT'd behind my company network, if I wish to pen test a website for a client and believe that a reverse shell is possible, what is a ...
2
votes
3answers
97 views

Telnet and vpn - protected or not

I am curious how safe I am if I use telnet through a VPN-tunnel to my webhotel? I thought that the information was encrypted between my computer to the vpn-providers default-gateway. But when it ...
2
votes
3answers
265 views

Can authentication in social networks through VPN defeat the purpose of the latter?

If a person uses VPN and authenticates herself to some social network through the VPN, doesn't she lose her anonymity for as long as the VPN session is used ? By losing her anonymity, I mean that her ...
2
votes
3answers
212 views

Does the principle of the CRIME & BEAST attack affect VPNs?

I was recently reading about the attacks on SSL/TLS that CRIME and BEAST were able to exploit by attacking the compression in the secure session. Upon reading this I remembered that OpenVPN has ...
2
votes
2answers
137 views

How to create an anti-flood mechanism without leaving VPN's out?

I'm trying to protect my applications from some bots that are either malfunctioning or trying to take my sites down (lots of requests from the same IPs in the logs). Every time someone requests an ...
2
votes
2answers
199 views

OpenSSL, x509: what is the correct way to picture signing authorities?

For the purposes of creating a VPN, I can't find a logical explanation of OpenSSL's/x509 scheme. I'm royally confused about these three terms, Certificate Authorities Gateway certificates End-point ...
2
votes
4answers
155 views

Intrusion detection architecture

I want to propose an architecture of intrusion detection on the schema shown below. Should I place one IDS in front of each server, or would one be sufficient for all the servers?
2
votes
4answers
6k views

Can my company access my computer via the VPN?

The job I have requires that we have computers at home, a few years ago they had everyone install a VPN on our home personal computers (the company did not provide us with these computer) how safe if ...
2
votes
1answer
4k views

Risks of Microsoft Remote Desktop access behind a secure VPN

This is mostly for my own education, but a scenario has came up at work that has me skeptical. I'd like for the security experts to tell me if this policy is overbearing or not. I remote into a VPN ...
2
votes
3answers
739 views

Filtering In Iran

Since many of you already know the Iranian government aggressively uses internet censorship to block sites such as facebook, flicker, bbc, etc. The Iranian people use various methods to bypass ...
2
votes
1answer
631 views

What is a DNS leak?

I'm planning on getting a VPN service (probably Privateinternetaccess) and read that it is imperative to plug DNS leaks. The only information I found on google describing what these are is here and I ...
2
votes
2answers
432 views

Test Android Secure Encrypted Traffic

For testing android traffic encryption I have configured a VPN client in my phone. What simple test I can perform in my home wifi network to verify that the traffic is really encrypted and secure?
2
votes
2answers
97 views

What are the advantages to using a VPN over secured/trusted wifi

It's often recommended that you should use a VPN when using unsecured or untrusted networks, such as open public wifi or secured wifi that you don't control. What are the advantages to using a VPN on ...
2
votes
1answer
68 views

L2TP/IPSec: Mutual authentication BEFORE user can access VPN

I came across a question You are the network administrator for your company. You have deployed Windows Server 2008 on all server computers in your company. You have deployed the Network ...
2
votes
2answers
529 views

Pros/Cons to OpenVPN vs “VPN over OpenSSH”

What are the major differences between using OpenVPN and using VPN over OpenSSH? Does adding a virtual tunnel interface to a SSH connection offer the same benefits of OpenVPN? Can PuTTY be used on ...
2
votes
2answers
194 views

How can I protect myself from the VPN operator when using a VPN to gain free access to the Internet?

I live in a country that the government blocks most ways of accessing to the uncensored Internet (like blocking VPN pptp, l2tp), Luckily there are some very fast services still available like Kerio ...
2
votes
1answer
10k views

OpenVPN Tap vs Tun Mode [closed]

I would like to know practical difference between TAP and TUN mode when use with OpenVPN. When to use TAP and When to use TUN ? What types of traffic will pass with both mode ?
2
votes
3answers
299 views

Are intermediate signing certs the only secure+practical way to manage OpenVPN client certs?

My organization needs to issue (and revoke) OpenVPN client certificates for people working remotely. Our system is based on a standard OpenSSL CA setup and the easy-rsa tools, and the whole directory ...
2
votes
2answers
704 views

Ordering of shared Phase 1/ISAKMP VPN policies

The various Phase 1 settings of a VPN tunnel policy are fairly well-established (encryption, hashing, DH group, lifetime), but in what order are they considered applicable to a more-secure tunnel? I ...
2
votes
1answer
775 views

Analyzing wireshark results (openvpn)

I signed up to Mullvad for VPN service, and manually run OpenVPN from my Linux box. I rebooted my computer and make sure not to start any OpenVPN service. Yet when I did a Wireshark analysis I am ...
2
votes
2answers
911 views

ISP role with VPN & VPS?

I have notice online that many people get a VPN so that ISP can not view the sites you visit, create a profile of you and so on. Reading How safe is it to connect to Internet through VPN?, Jonah ...
2
votes
1answer
49 views

Does having a VPN service mean accessing my email etc. over public free open WiFi mean I have security/privacy? [duplicate]

Is my information secure over public WiFi if I use a VPN service? i.e. protection of emails and login details.
2
votes
3answers
101 views

Is there any point to connecting to a VPN server while on the local network?

I plan on installing a VPN server on one of my computers that is running Ubuntu for purposes of connecting to my local network while I am not at home. At home I also have a desktop computer (separate ...
2
votes
1answer
224 views

PFS incentive during IKE Phase 2

I'm trying to see the actual point in implementing Perfect Forward Secrecy during Internet Key Exchange Phase 2, if it had already been used during Phase 1. Quoting the IKEv2 RFC: RFC 5596 ...
2
votes
2answers
572 views

How does VPN (IPSec) work?

Let's assume both, my VPN client and VPN gateway has public and private keys. I encrypt my request with VPN gateway's public key. VPN gateway gets the request, decrypts it with private key. Then, VPN ...
2
votes
2answers
268 views

Skype Audio / Video Session over VPN?

Basically I'm wondering if a Skype video session along with audio could be logged (or recorded) over a virtual private network? I know whoever hosts the VPN server can log which websites you visit (or ...
2
votes
1answer
178 views

How does tunneling actually work?

I recently saw a question in which someone implied that tunneling could foil MITM even if it were implemented while an MITM was taking place. My understanding of tunneling is that it is only capable ...
2
votes
2answers
694 views

What order is best for nesting VPNs?

if anyone is available to give me advice on a VPN situation I'd appreciate it. So the story is, I have one Swedish VPN which I trust not to log, and which I've connected to with my real IP, and I've ...
2
votes
1answer
71 views

Remote network security option

I'm a bit confused with some different network security techniques. Say we want a secure communication with a particular mail server in a remote company network. Reading and sending mails should be ...
2
votes
1answer
1k views

IPSec AH + ESP used together

When ESP and AH are used together (ESP transport, AH transport) on the same packet does ESP encrypt the AH's hash, or is the hash left in the clear? If the hash isn't encrypted, there are obviously ...
2
votes
2answers
2k views

When connecting to internet through VPN what precautions should be taken?

I've read this similar question and it has some very good information. Can a site that has personal information about you be accessed by another site to determine who you are/where you are? For ...
2
votes
1answer
3k views

Is it secure to install RSA SecurID Software Tokens on the same computer that will be used to access the VPN?

My office switched from using the old hardware RSA SecurID key tokens to the RSA SecurID Software Tokens and most users have them installed on the same machines they use to access the VPN. I asked ...
2
votes
2answers
736 views

Low level attacks on WLAN/LAN connection while connected to VPN

Is it really secure to connect to a (well-secured) VPN server over an unencrypted WLAN connection (or maybe a hotel Ethernet)? I know, that there have been questions like this - but I'm not asking ...
2
votes
0answers
178 views

Some http requests are not send encrypted by vpn! Why?

I subscribed to a VPN service recently, and installed wireshark to take a look at the traffic sent from my computer. Practically all of it goes through UDP protocol, encrypted. But there are two HTTP ...
2
votes
0answers
99 views

Can HTTPS or VPN connection be sniffed through UTM device? [duplicate]

Someone told me that if my device communicates with a server on Internet via VPN connection or HTTPS, all the contents that I have sent can be sniffed and decrypted by the UTM device (or more ...
2
votes
0answers
114 views

Duration of torrent activity and ISP tracking [closed]

The only reason I use BitTorrent is to download Linux distros, Open source apps and large documentation files. My ISP contacted me once and warned me: Ok, you aren't downloading anything illegal ...
1
vote
4answers
535 views

Protecting yourself from a malicious VPN

I am connecting to a VPN server that has been compromised and is under the complete control of an attacker. The virtual network itself contains numerous attackers waiting for a new target. What ...
1
vote
4answers
6k views

Open VPN has DNS leak

Since using www.dnsleaktest.com I have found that any VPN service using Open VPN will leak my DNS through the tunnel. I have tried and tested several VPN providers, even those who say that they have ...
1
vote
2answers
365 views

How do I ensure that a VPS host will keep my information private?

Basically, I want to use OpenVPN on a VPS to browse confidentially. However, I don't know much about VPS hosters and to me, it seems to be a hard choice because there are so many. However, I think ...
1
vote
3answers
654 views

Does the VPN provider know my dedicated IP?

Is it ok for a VPN provider to ask a new costumer to send a log file in order to solve a login probelm? I trusted him and sent him a log file because he said that would be the best way to see why i am ...
1
vote
3answers
2k views

How can I use a VPN to protect my privacy

How should I configure a VPN in order to access blocked websites and to hide my identity? Usually I use SSH tunneling to protect my privacy and to escape censorship. I know nothing else about VPNs ...
1
vote
3answers
438 views

Client side scripts through proxies

If you're trying to hide your IP address using VPN/proxies can a website using client side scripting record your real ip? If yes is there any alternative to blocking all scripts as that breaks ...
1
vote
3answers
1k views

What utilities exist to brute force a username and password?

I'm trying to persuade management to purchase two factor authentication for securing VPN and terminal server access. I've made significant progress by demoing TSGrinder, but would like to list other ...
1
vote
3answers
2k views

HTTPS or HTTPS within VPN for WIFI security?

I read that HTTPS can be comprimised and is not as safe as you think. With a free VPN you have to put some trust in a free VPN server with your data, and surely your data from when it leaves the vpn ...
1
vote
1answer
4k views

Is PPTP VPN ever secure? Under DD-WRT? [duplicate]

PPTP is not an open, ratified standard the way that, for example, SSL/TLS is. (see: http://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_1.2 and http://datatracker.ietf.org/doc/rfc5246/ ) The ...
1
vote
1answer
238 views

Setting up a ram based VPN

Are there any ram based VPN solutions that have options to keep no logs? I've been looking to set up a portable linux distro, probably Debian, that I'd run from CD without any form of persistence. It ...
1
vote
2answers
4k views

OpenSSL, x509: what's the significance of CN (Common Name)?

With regard to these three items Certificate Authorities (CA) Gateway certificates End-point Certificates (client-cert) What is the significance of the Common Name CN with regard to the a VPN? ...
1
vote
2answers
10k views

Browsec - VPN and anonymizer

According to Browsec's website this application can be used to Bypass firewalls. So in countries like Iran it seems a useful tool to bypass censorship and filtering. For start using this application ...
1
vote
3answers
166 views

Howto pass overly protective corporate firewall

My Corporate Network was always being monitored, but a few days ago they started to block and censor all HTTPS traffic. Recently IT guys forged certificates for all major HTTPS web sites and acts as a ...