This tag is applied to questions related to various VPN types such as PPTP or IPSec.

learn more… | top users | synonyms

9
votes
5answers
12k views

How is Facebook locating me when I use a VPN?

I am using a private VPN network for my internet connection. But it seems that if I go to http://m.facebook.com and try to check in, Facebook sees my location properly. My IP address seems to be from ...
1
vote
0answers
38 views

TLS in slow/unstable mobile/wireless networks [closed]

We have this rather old VPN tunnel software that is running in various wireless/mobile networks (from 2G mobile and upwards). It is currently running WTLS, as this software is from the old days when ...
9
votes
2answers
761 views

How the NSA can break trillions of encrypted Web and VPN connections

Based on Diffie-Hellman's negotiation of key exchange, why would it turn out that only a few primes are commonly used? What and who determines the prime? Would it not be safer to use a safe prime? (...
1
vote
2answers
199 views

Snoopers Charter VPN advice needed

With the Snoopers Charter coming soon in the UK, I intend to start using a VPN service. Disregarding issues of the VPN logging user details or leaving my IP address discoverable, what other potential ...
0
votes
1answer
57 views

Cmd traceroute not being affected by VPN configuration

I am using a virtual private server in combination with SOCKS5 proxy, which in essence provides the same functionality as VPN. When I connect and check my public IP, it shows the location of the ...
1
vote
2answers
103 views

When connecting to a VPN Provider, do other connected users pose a threat?

TL;DR: Can other users connected to a VPN Provider exploit my computer or information? I usually use a VPN service when connecting to the Internet. The provider is a private company whose business ...
19
votes
4answers
2k views

Is a VPN really required with free Wi-Fi on a train?

Our local train service has added free Wi-Fi. I have been checking GMail and logging into a few apps. Then logging into websites using HTTPS. Is this secure, especially if done via app? The network ...
1
vote
1answer
142 views

How does WebRTC bypass a VPN Tunnel

While reading about WebRTC I was wondering how exactly the default route through an established VPN tunnel is being bypassed. If I'm not mistaken the VPN tunnel is normally represented in the system ...
7
votes
5answers
11k views

Prevent network users from creating an unauthorized outgoing VPN connection to avoid network policies

Is it possible to prevent network users from creating unauthorized outgoing VPN connections to avoid network policies? Edit- What is the best way to detect unauthorized outgoing VPN connections while ...
2
votes
1answer
101 views

Can in a VPN LAN-to-LAN one site be completely isolated from the other?

In a VPN LAN-to-LAN setting, is it possible to isolate one site from the other? I know that we can use a firewall but that would obligate us to manage specific rules in the firewall. I would like to ...
7
votes
2answers
203 views

Does using a VPN completely stop MITM (man in the middle) attacks? If not, what other defences should I consider?

Just for added context, I am curious about connecting to a remote desktop using a VPN but if there are any major differences that can be highlighted for other services I would be interested in that ...
5
votes
1answer
247 views

Does a VPN provide any security benefits over sshuttle or a vanilla ssh tunnel?

I use sshuttle to tunnel my traffic through one of my remote boxes whenever I'm in a cafe or connected to an insecure network. Does a VPN provide any additional security benefit over this kind of ...
5
votes
2answers
2k views

Is using VPN, Tor and ProxyChains together more secure?

Similar question (Tor and VPN only). All these three technologies seem to share the same goal, i.e. making internet traffic anonymous. Does it make any sense to try to use them together to increase ...
0
votes
0answers
109 views

VPN daisy-chaining via Virtual Machines

Assume that my host is a Windows computer. I have Virtualbox installed and I put on it another Windows guest. Assuming I connect with my host to a VPN provider called "A" with OpenVPN and with my ...
4
votes
2answers
5k views

What are the practical risks of using IKE Aggressive mode with a pre-shared key?

Our scanning vendor is marking us down because we are using IKEv1 in Aggressive Mode with a pre-shared key. We are using Sonicwall's Global VPN Client to connect to the VPN device in question. I ...
1
vote
2answers
94 views

Infected employee using office VPN was part of a DDoS attack

Recently, our office VPN was taken down by our ISP after discovering a DDoS attack. Apparently an employee connected to our VPN is infected. There were no logs at the time of the event. Besides ...
0
votes
0answers
106 views

Adobe Flash-based site's UI misbehaves when it's accessed through a VPN. Is it leaking my real ip address?

Here is a setup: A Linux/Windows VM at home (will call it "hidden VM" from now on) which is placed into an isolated environment (it's located in its own isolated virtual network, and the only way ...
0
votes
0answers
68 views

VPN Server Inside VPN client on Router

This is a different context of an already asked question: In a few words: Sub-VPN or VPN SubNetwork... VPNsception? So I am using DD-WRT flashed router which connects as a client to VPN server "...
11
votes
5answers
11k views

Does IPSec use IKE or ISAKMP?

Does the IPSec protocol suite use IKE or ISAKMP? RFC 2828 states ISAKMP is the protocol used in IPSec to handle SAs, key management and system authentication. Other sources say IKE is the protocol ...
95
votes
12answers
19k views

Is there a legitimate reason I should be required to use my company's computer? (BYOD prohibited)

I just got a new job at a medium-sized (~100 employees) company and one of the first things I was told is that I cannot use my own computer, because I need to be able to connect to their network, ...
2
votes
2answers
179 views

How secure is VPN addons for browsers [duplicate]

I regularly uses VPN addons like browsec, Zenmate etc in my browser. These addons/Plugin boast about hiding IPs, bypass firewalls, faster and encrypted services, tracking protection etc which they ...
2
votes
1answer
74 views

Properly solving IP leaking from WebRTC and other apps with STUN when using a VPN

This is really a follow-up question from this: Stun scripts/webRTC IP leaks I'm connecting to a VPN using a virtual adapter, which has a default routing rule so all traffic goes through it. I still ...
5
votes
1answer
463 views

How do VPNs bypass ISP monitoring

How exactly do VPNs bypass monitoring of the requests and traffic? I get that the traffic is encrypted, but how do VPNs manage to hide the DNS requests before establishing an encrypted transfer? If a ...
0
votes
1answer
144 views

Commercial VPN for privacy: Which country servers to connect to?

I live in North America and I use a commercially-provided VPN. I use it to encrypt my connection to the Internet, so that my ISP cannot store logs of my DNS requests or browsing activity. I also use ...
4
votes
4answers
2k views

Are firewalls required if using a VPN [closed]

If you are using a VPN to transmit data from router to router, do you still need a firewall? I am using a VPN Server to encapsulate data from one cisco router to another. Do I need to have a firewall ...
2
votes
2answers
3k views

Can an employer see cellular network traffic routed through company-owned device?

When on the road, I have a company issued iPad with Verizon service, my personal ipad (wifi only version), and my iPhone. If I turn on the hotspot on my company iPad, then connect my personal ...
0
votes
1answer
58 views

Should I set up a VPN for these services?

I'm developing a personal project with a few people. I need to setup Continuous Integration service, Jenkins, version control service, Perforce, repository manager service, Nexus, and a Web server. ...
1
vote
3answers
277 views

A neighbor took the Mac address from my router

It would appear one of my neighbours is monitoring my internet traffic, I am wondering firstly how is this possible and secondly would using a VPN stop the attacker from being able to read / intercept ...
0
votes
1answer
54 views

Is all traffic through a router configured to use openvpn protocol sent through a single port?

A home wifi router is configured to use a vpn service, such as PIA, and in particular is configured to use the openvpn protocol. Is all traffic through this router sent through a single port? Is the ...
2
votes
2answers
160 views

Public AP: How to reduce vulnerability window between Captive Portal and starting VPN?

I always use a VPN on my Mac when I access over public APs (such as coffee shop free WiFi) How much should I worry about the window of time where I am in the captive portal (the agreement screen) and ...
5
votes
2answers
4k views

Are VPNS vulnerable to active man in the middle attacks?

I know that with SSL/TLS, man in the middle attacks are not possible. For example if Alice and Bob are trying to communicate and Trudy is trying to perform a man in the middle attack, then when Alice ...
-3
votes
1answer
76 views

Should I be concerned about this VPN logging? [closed]

I am currently using BT Guard. It has no client on my PC, although I connect through OpenVPN. I pay about 9€/month for BT Guard, who say that they keep no logs. However, Tiger VPN which also uses ...
1
vote
3answers
1k views

VPN only for a specific software

In our company we have a software which requires a VPN to be connected in order to properly work. However that is not the only software we use here. The problem is that other software get way slower ...
2
votes
3answers
589 views

How to spoof my IP address to JavaScript and other security concerns

Many websites require JavaScript. However, enabling JS means that a website can run a JS snippet to retrieve the user's IP address (even if they are behind a proxy or VPN). So, how can I (the user) ...
0
votes
2answers
229 views

Is the (SSL3-based) SSTP VPN protocol vulnerable to the POODLE attack?

The Secure Socket Tunneling Protocol is a VPN protocol developed by Microsoft. It sends traffic over an SSL version 3 connection. Since SSlv3 is vulnerable to the POODLE attack, does this mean that ...
2
votes
1answer
595 views

Hide Docker Containers Behind VPN

I want to run all services within Docker containers (including RA and site-to-site VPN) such that all containers except the VPN are not exposed on the public IP, but are reachable on the VPN IP. This ...
40
votes
7answers
71k views

What is the difference in security between a VPN- and a SSL-connection?

I would like to design a client-server application where the server is placed on Internet. I assume that I could set up the client-server connection using VPN (is it using IPSec?) or using a SSL ...
7
votes
5answers
350 views

Can a website detect my local WIFI network I am in?

I have two computers, both of them locate at the same local WIFI network ( ie: connected to the same router). I use VPN on a computer to visit a website, and don't use VPN on another to visit the ...
-1
votes
1answer
101 views

How does my internet look over a public wifi connection? [duplicate]

I am curious. I use VPN over a public wifi. How does my internet traffic look as it is being transmitted over the public wifi connection? Can anyone intercept and determine what websites I visit? ...
0
votes
3answers
10k views

Can you still be tracked when using a VPN?

If I am using a VPN on twitter, can an organisation like Anonymous or Lulzec track me and find out my identity?
4
votes
1answer
341 views

Does using NAT-T for L2TP / IPsec VPN pose a realistic security risk?

I'm working on upgrading an old Windows RAS server that hosts PPTP VPN. I want to move to a L2TP/IPsec VPN. Due to the firewall appliance we use, the VPN server has to be behind a NAT. This means ...
5
votes
3answers
924 views

PCI DSS - VPN network?

My network is segmented into internal (which holds private cardholder data), DMZ and VPN. There is a gateway in between which restricts access, for example: VPN: 10.0.0.0/24 DMZ: 10.1.0.0/24 INT: 10....
2
votes
1answer
223 views

PPP over SSH - is this correct?

I see a lot of talk online about whipping up a VPN connection using PPP over SSH. This term confuses me, as SSH is an app tier protocol and PPP operates on the data-link layer. So, my question is: ...
1
vote
1answer
3k views

Difference between X-Forwarded-For IP, X-Real-IP, VPNs and TOR

I have this Google Chrome Privacy Preserving Extension that I am working on. Where I can spoof the header information e.g user agents and else. When I spoof X-Forwarded-For IP and go to http://...
0
votes
1answer
90 views

Preventing installation of VPN software on home computers? [closed]

How can users be prevented from installing VPN software on their home computers?
0
votes
2answers
683 views

How to post comments on websites without being traced back

Just trying to get some general sense about the security on internet now-a-days. There are so many websites I go and comment on different things. If some comments are political and they don't like, I ...
0
votes
0answers
4k views

How secure is the TAP Windows Adapter V9? [duplicate]

I use Cyberghost to browse the web on public wifi. How secure is the network adapter? Cyberghost uses OpenVPN which utilizes TAP Windows Adapter V9. I am asking this, because I believe at the ...
1
vote
0answers
1k views

OpenVPN redirect-gateway def1 bypass-dhcp not working on 3G [closed]

Edit I followed @begueradj advice in comments and posted the question on ServerFault : http://serverfault.com/questions/709340/openvpn-redirect-gateway-not-working-on-3g-cellular Original Question ...
1
vote
0answers
88 views

Is a NAS vulnerable when VPN'd through dedicated server?

I'm concerned about the security of part of my home setup, but I'm quite unfamiliar with a lot of this so I thought I'd start out by saying what I'm trying to do, in case my solution is a poor one in ...
17
votes
5answers
28k views

What are the pros and cons of a VPN for privacy

Recently I have been getting more and more interested in the security (privacy and anonymity) issues of my online life. Not that I have anything to hide, or that what I do online is so interesting to ...