a Virtual Private Network is a private network that is built upon a public network, typically using encryption for to secure the private communication.

learn more… | top users | synonyms

4
votes
5answers
21k views

If I use a VPN, who will resolve my DNS requests?

Will they be resolved by my VPN provider, or by my original ISP (if left on "automatic" settings)? Would I have to manually configure a dns server, to make sure my requests will not be resolved by my ...
3
votes
3answers
1k views

How can I make it more difficult for a user to create multiple accounts?

I would like to know the best way to increase security on a website so that the a single user can't create multiple accounts. What all of a user can be traced? I'm thinking: IP address Mac address ...
1
vote
1answer
336 views

How am I able to use Input Director when one machine is VPN'd into work?

So - I don't actually have a problem, but I'm really curious, because apparently VPN's don't work the way I thought they did. It was my impression that when I VPN into my office, my computer is ...
7
votes
4answers
2k views

Security considerations in providing VPN access to non-company issued computers

There have been a few people at my office that have requested the installation of DropBox on their computers to synchronize files so they can work on them at home. I have always been wary about cloud ...
6
votes
7answers
19k views

Are services like Hide My Ass and UnoDNS reasonably safe to use?

While in Germany, I want to keep using my Netflix account, watch PBS, CNBC. I have found following services: A VPN: https://hidemyass.com/vpn/promo/1/5/ A DNS: http://www.unotelly.com/unodns/ I an ...
11
votes
8answers
7k views

Whats the best way to make my internet traffic anonymous?

Recently I have thought more and more about how to make my Internet traffic anonymous. Not for illegal reasons, but just to stop leaving information about me. The methods I know of to anonymize my ...
1
vote
1answer
3k views

What are the risks of removing ISATAP from the default global block list?

The process of installing Microsofts pseudo VPN called Direct Access requires me to remove the ISATAP name from the default global block list by running this command: dnscmd /config ...
3
votes
3answers
321 views

Dedicated Server in Cloud Environment - SSL Remote Login vs Dedicated VPN

Thanks for taking your time to look into this question. Background I have my website hosted in a dedicated server in the cloud. The server is a Windows 2008 R2 machine. To publish I FTP files to ...
7
votes
3answers
2k views

Why does OpenVPN require securely sharing certs with clients?

The ubuntu docs on OpenVPN have this part in the instructions: Copy the following files to the client: /etc/openvpn/ca.crt /etc/openvpn/easy-rsa/keys/hostname.crt ...
5
votes
5answers
2k views

Encryption laws in India — is it allowed to use ssh and VPN?

I have a very similar question to the one asked here (regarding Iran). However, I would like to use ssh and vpn while being in India. I found already this survey of cryptographic laws but I don't ...
6
votes
4answers
1k views

How to keep secure while browsing on open wifi when SSL VPN is blocked?

After a recent visit to a hotel I was surprised to discover that they blocked access to my OpenVPN server. I often use this as a way to secure my internet traffic when I am on public wireless. ...
3
votes
2answers
349 views

VPN Appliance Placement Options

I'm currently looking to implement a VPN solution (based on a Checkpoint Connectra) purely to provide remote access to staff (no site-to-site, or customer access), but the one design decision I can't ...
3
votes
5answers
375 views

Securing data transfer between public network and personal accounts

I would be traveling soon and I am looking for all kinds of ways to encrypt the data transfer (usernames, passwords, emails ...) between the new networks to which I will connect my Laptop, that is ...
4
votes
2answers
2k views

L2TP/IPsec shared secret: Can it be public?

My university provides a VPN service to gain access to internal services to all members. They are apparently using an L2TP/IPsec solution by Cisco. I'm able to connect just fine, but I'm a bit ...
15
votes
5answers
10k views

What are the pros and cons of a VPN for privacy

Recently I have been getting more and more interested in the security (privacy and anonymity) issues of my online life. Not that I have anything to hide, or that what I do online is so interesting to ...
5
votes
4answers
6k views

Prevent network users from creating an unauthorized outgoing VPN connection to avoid network policies

Is it possible to prevent network users from creating unauthorized outgoing VPN connections to avoid network policies? Edit- What is the best way to detect unauthorized outgoing VPN connections while ...
1
vote
1answer
2k views

Is there a difference between a VTI and a regular VPN tunneling process?

Is there a difference between a VTI (Virtual Tunnel Interface) and a regular VPN tunneling process? Or have I got the whole concept wrong?
3
votes
3answers
7k views

Understanding VPNs : How VPNs can be used for anonymization?

Previously, I asked the question Why is it difficult to catch “Anonymous” or “Lulzsec” (groups)? I understood every answer except the VPN thing. Its because I never knew what VPNs were. Any how that ...
10
votes
1answer
2k views

If an attacker is intercepting all of my traffic, will he be able to listen on my VPN session?

If I am a remote user, connecting to my firm from home, using IPSec VPN tunnel or through SSL, and an attacker is intercepting all of my traffic, will he be able to watch my VPN session on the clear ...
1
vote
3answers
767 views

Sniffing on VPN configuration

Our company wants to implement a service based on sniffing for security purposes, since we manage important information this requirement is imperative. The situation is as follows. Everyone in the ...
8
votes
3answers
707 views

Public wifi security protocols

I should apologise first- this post could seem a lot to ask for, but I am starting to go around in circles. I am interested in securing my laptop for when I use public wireless hotspots, as I am a ...
1
vote
3answers
346 views

What security protocols provide point-to-point confidentiality?

Am I right in thinking that VPN doesn't protect until you're out onto the external network (assuming you're connecting from within an internal network)? Or does VPN provide confidentiality from the ...
0
votes
2answers
977 views

Protecting yourself against DNS spoofing?

Are there any things which the user can do, on their own machine, to protect against DNS spoofing? I was just thinking when I was at the airport last and I wanted to check my email I used a hotspot ...
8
votes
2answers
17k views

How safe is it to connect to Internet through VPN?

Sometimes I connect to internet using a VPN connection to be able to access the blocked websites. I've got a few questions regarding this: Are my important data (like my credentials) vulnerable to ...
1
vote
3answers
1k views

What utilities exist to brute force a username and password?

I'm trying to persuade management to purchase two factor authentication for securing VPN and terminal server access. I've made significant progress by demoing TSGrinder, but would like to list other ...
7
votes
2answers
732 views

What information is exposed by simply opening an RDP connection to the internet?

Microsoft, Rackspace and other hosted providers allows people to RDP into that server. Here are a few examples: Microsoft has something called "Azure Connect" it is very easy to expose a domain ...
1
vote
3answers
2k views

How can I use a VPN to protect my privacy

How should I configure a VPN in order to access blocked websites and to hide my identity? Usually I use SSH tunneling to protect my privacy and to escape censorship. I know nothing else about VPNs ...
6
votes
2answers
245 views

How does the predator network prevent outside control by an attacker?

I read several articles saying some of the command and control fleet for the US robotic attack planes may have been infected with a virus. Does this command and control system communicate with the ...
5
votes
3answers
952 views

What is the difference between encrypted data and data sent through an encrypted tunnel

I am looking at different VPN protocols. [1] L2TP does not provide encryption so require IPSec to encrypt the data [2] IPSec tunnel provide encryption to the tunnel What is the difference in terms ...
8
votes
4answers
1k views

How to tunnel all network communication?

I'm looking for a way to tunnel all network communication from my laptop through another computer. I can control the software on both the laptop and the computer. The connection between them should be ...
0
votes
1answer
2k views

Is OpenVPN secure in this way?

I'm familiar with OpenVPN because my home router has a builtin OpenVPN server. I would like to use OpenVPN all the time, but how do I deal with situations where I don't own the routers? ex.: in a ...
5
votes
1answer
739 views

What is important when selecting a VPN provider?

I am new to using a VPN service and came across the past at How do I pick a VPN provider? however am unsure if I need to use a personal VPN service or if OpenVPN fits my needs which are as follows; ...
4
votes
2answers
3k views

When is it posible to sniff VPN traffic?

I have created a VPN service using Routing And Remote Services on Windows Server 2008 and I haven't configured any Server Network Policy yet. There is only one user for connecting to VPN and all of ...
1
vote
4answers
521 views

Protecting yourself from a malicious VPN

I am connecting to a VPN server that has been compromised and is under the complete control of an attacker. The virtual network itself contains numerous attackers waiting for a new target. What ...
7
votes
1answer
192 views

Trace large volume of web traffic, stopped at VPN

I have a web server. I recently received a large volume of web traffics, after tracking it down, it is coming over a commercial VPN provider. Is there any way to keep the tracing going, beyond the ...
4
votes
1answer
195 views

Store To Store communication through MPLS VPN

In a PCI environment with an MPLS VPN network setup should you allow store to store communication? Do you think that an MPLS network would be consider secure enough for this? why or why not?
15
votes
8answers
2k views

How do I pick a VPN provider?

There's a lot of VPN providers out there. Some are free, some are for a fee, some report to the government, some inject ads int your HTTP, some are in other countries, you might not have any real ...
8
votes
1answer
233 views

distributing files to VPN partners

suppose i've created VPN certificates for a certain VPN-RoadWarrior-Client, expressed in the files VPN-RoadWarrior-Client.key and VPN-RoadWarrior-Client.crt*, however VPN-RoadWarrior-Client is ...
22
votes
2answers
5k views

symmetric encryption session keys in SSL/TLS

This question concerns the session send and receive keys used in SSL/TLS protocol. my understanding is that this key uses symmetric encryption (DES, AES, BlowFish, etc.) I'm wondering, if ...
4
votes
4answers
854 views

Are there consumer-grade VPN services that support two-factor authentication, like SecurID?

I'd like to increase my VPN security, and Google hasn't turned up anything with regard to VPN services and SecurId. Does anyone know of services like this?
5
votes
5answers
15k views

Multiple VPN clients in parallel

If I were to run more than one VPN clients on my machine, simultaneously, what risks would be involved? E.g. are there technical conflicts, such that it wouldn't work right? Could there be ...
5
votes
0answers
824 views

SSL vs IPsec what's the difference [duplicate]

Possible Duplicate: What is the difference in security between a VPN- and a SSL-connection? Which is more secure? And offer better access control?
3
votes
1answer
875 views

I'm using a Cisco ASA as a VPN endpoint. Where do the VPN clients get firewalled?

(Is this too application specific? It seems like a reasonable question that would be useful to other people...) So, I've got this ASA in front of a network that I didn't set up. It's been ...
8
votes
2answers
2k views

3DES vs DES for VPN connections

I'm trying to get Android 2.1 phones to connect to our corporate VPN, but it would appear they only support DES rather than 3DES for encryption. Is it safe to use DES, am I going to get hacked if I ...
9
votes
1answer
1k views

What's are the advantages of L2TP/IPSEC over plain IPSEC?

As the title says really, my firewall (Sonicwall) can do either IPSEC or L2TP/IPSEC for VPN connections. One advantage of L2TP/IPSEC I can see is that the client computer get allocated it's own IP ...
4
votes
1answer
2k views

Is L2TP as secure as IPSEC for VPNs?

Is it as secure to use L2TP for VPN access, rather than IPSEC? Am I introducing any risks by using L2TP?
22
votes
7answers
32k views

What is the difference in security between a VPN- and a SSL-connection?

I would like to design a client-server application where the server is placed on Internet. I assume that I could set up the client-server connection using VPN (is it using IPSec?) or using a SSL ...
18
votes
4answers
1k views

IPsec (Internet Protocol Security) facts

Internet Protocol Security (IPsec) is a successor of the ISO standard Network Layer Security Protocol (NLSP). What are the advantages, disadvantages, other interesting facts regarding the protocol?