This tag is applied to questions related to various VPN types such as PPTP or IPSec.

learn more… | top users | synonyms

2
votes
1answer
226 views

How does tunneling actually work?

I recently saw a question in which someone implied that tunneling could foil MITM even if it were implemented while an MITM was taking place. My understanding of tunneling is that it is only capable ...
2
votes
1answer
708 views

Is it necessary to use PEAP for L2TP/IPsec?

This is a sister question of Is EAP-MSCHAP v2 secure?. Based on my understanding, IPsec should have authenticated the server (we're using PKI) and secured the rest of the protocols before the user ...
2
votes
1answer
81 views

Remote network security option

I'm a bit confused with some different network security techniques. Say we want a secure communication with a particular mail server in a remote company network. Reading and sending mails should be ...
2
votes
1answer
91 views

VPN using SmartPhone Location

When you VPN using your smartphone as a hotspot, can the VPN tell your location like it can when you VPN over a wireless connection hotspot?
2
votes
1answer
5k views

Is it secure to install RSA SecurID Software Tokens on the same computer that will be used to access the VPN?

My office switched from using the old hardware RSA SecurID key tokens to the RSA SecurID Software Tokens and most users have them installed on the same machines they use to access the VPN. I asked ...
2
votes
2answers
959 views

Low level attacks on WLAN/LAN connection while connected to VPN

Is it really secure to connect to a (well-secured) VPN server over an unencrypted WLAN connection (or maybe a hotel Ethernet)? I know, that there have been questions like this - but I'm not asking ...
2
votes
0answers
29 views

What are the security risks of using public address schemes for the DHCP of your VPN'd Users?

At the company I work for we recently purchased a network scanning tool to help with asset inventory and overall PC network management. My supervisor, while looking at the different IP address ranges ...
2
votes
0answers
50 views

what are the advantages and disadvantages of using ipsec protocol, how vulnerable is it? [closed]

There are several ways through which the VPN can be applied, like SSL, TLS etc. But most of the VPN use IPSec. What kind vulnerabilities does ipsec possess?
2
votes
1answer
133 views

VPN and Unencrypted Protocols

I recently started subscribing to a VPN service, and to check that all traffic is in fact encrypted I used Wireshark. According to this page, the lower, right hand side should be gibberish (from this ...
2
votes
0answers
113 views

Ways to prevent traffic injection by ISP [closed]

I live in a big brother country (Egypt, but valid to many other countries), which apparently bought Hacking team and fin fisher software since couple of years. After reading about the very-easy ways ...
2
votes
0answers
196 views

Does enabling VPN on our router increase the risk of our network being exposed to the outside network? [closed]

We are thinking about using VPN to connect our remote office and the main office and also support developers working from home. To do this, we are planning to purchase 2 CISCO (or similar) routers to ...
2
votes
2answers
79 views

Can a website detect which method you are using to connect (LL2P, SSTP and PPTP)

When you connect to a website using a VPN with the same IP however using a different type of connection each time (LL2P, SSTP and PPTP) can the website detect the difference between these connection. ...
2
votes
1answer
123 views

Non-profit on limited budgets looking for safety with VPN/TOR etc [closed]

First off, thank you ahead of time for your patience. We are a small non-profit with a 100% volunteer staff. We deal with children and some adults that suffer from Mitochondrial disease. So, I was ...
2
votes
0answers
69 views

How do nested vpns through VM work?

Let's say I have 2 different VPN services (vpn1 and vpn2) both using OpenVPN and a Linux host running a guest VM. Now let's suppose I connect from the Linux host to vpn1. Then I connect from the ...
2
votes
0answers
178 views

How secure is L2TP+IPSEC?

I understand PPTP is widely used still, but insecure. A convenient alternative is: L2TP+IPSEC. How secure is it? What steps in the server setup can I take to maintain a high degree of compatibility ...
2
votes
0answers
104 views

Can HTTPS or VPN connection be sniffed through UTM device? [duplicate]

Someone told me that if my device communicates with a server on Internet via VPN connection or HTTPS, all the contents that I have sent can be sniffed and decrypted by the UTM device (or more ...
2
votes
1answer
1k views

What does a Remote Desktop Connection risk for both computers?

I recently had a malware issue called "mysearchdial" that installed itself into my home computer's browser because someone didn't pay attention to what they were installing. I RDP'd into my work ...
2
votes
0answers
187 views

Duration of torrent activity and ISP tracking [closed]

The only reason I use BitTorrent is to download Linux distros, Open source apps and large documentation files. My ISP contacted me once and warned me: Ok, you aren't downloading anything illegal ...
2
votes
2answers
155 views

Is a vpn connection through a proxy more secure?

At the moment there are a number of online services (Hide my ass or PIA) that offer some type of security through an VPN connection. This of course can work, but the big problem (for me at least) ...
1
vote
4answers
734 views

Protecting yourself from a malicious VPN

I am connecting to a VPN server that has been compromised and is under the complete control of an attacker. The virtual network itself contains numerous attackers waiting for a new target. What ...
1
vote
3answers
2k views

VPN only for a specific software

In our company we have a software which requires a VPN to be connected in order to properly work. However that is not the only software we use here. The problem is that other software get way slower ...
1
vote
2answers
153 views

understanding the point of VPNs

I can't really understand the concept of VPNs, since we already have various secure transmission protocols. Isn't the point of VPNs that people using its 'channels' can send encrypted data to each ...
1
vote
3answers
1k views

Can websites tell whether that I am visiting them using the same device?

Assuming that I am browsing a website ( say: Amazon.com) using Private/Incognito mode, and I clear my cookies, and have VPN turn on. Will the website still be able to identify that my device has been ...
1
vote
3answers
2k views

How can I use a VPN to protect my privacy

How should I configure a VPN in order to access blocked websites and to hide my identity? Usually I use SSH tunneling to protect my privacy and to escape censorship. I know nothing else about VPNs ...
1
vote
3answers
804 views

Does the VPN provider know my dedicated IP?

Is it ok for a VPN provider to ask a new costumer to send a log file in order to solve a login probelm? I trusted him and sent him a log file because he said that would be the best way to see why i am ...
1
vote
2answers
2k views

Is a VPN anonymous enough or do I also need to use TOR?

Is an anonymous VPN (like frootvpn) all I need to remain anonymous online or do I also need to use TOR or take other measures?
1
vote
2answers
535 views

How do I ensure that a VPS host will keep my information private?

Basically, I want to use OpenVPN on a VPS to browse confidentially. However, I don't know much about VPS hosters and to me, it seems to be a hard choice because there are so many. However, I think ...
1
vote
4answers
764 views

Anonymity through Tor over VPN [closed]

I want to do some research on network anonymity. Assume that I am careful enough not to disclose any personal information while connected to an anonymous network. If I run a system that uses TOR ...
1
vote
2answers
295 views

I'm wondering how I hide my identity online well [duplicate]

what are the different ways to become anonymous. Is quicksilver a good email for that? What are the different options? I know about proxies, Tor, and VPNs. Should I do all three? I like computers but ...
1
vote
3answers
575 views

Client side scripts through proxies

If you're trying to hide your IP address using VPN/proxies can a website using client side scripting record your real ip? If yes is there any alternative to blocking all scripts as that breaks ...
1
vote
1answer
136 views

If I use my own cloud server as a VPN can my internet traffic be tracked?

If I use some IaaS cloud hosting provider to create my own VPN, and then I connect to that VPN before torrenting something, can I be identified in any way? I assume that when you spin up an instance ...
1
vote
2answers
109 views

When connecting to a VPN Provider, do other connected users pose a threat?

TL;DR: Can other users connected to a VPN Provider exploit my computer or information? I usually use a VPN service when connecting to the Internet. The provider is a private company whose business ...
1
vote
1answer
6k views

SFTP or FTP through VPN?

I'm struggling to find out whether or not I should set up SFTP since I already connect to the internet using a secure VPN. Is the security using FTP through a VPN (using OpenVPN, more specifically ...
1
vote
1answer
401 views

Setting up a ram based VPN

Are there any ram based VPN solutions that have options to keep no logs? I've been looking to set up a portable linux distro, probably Debian, that I'd run from CD without any form of persistence. It ...
1
vote
1answer
1k views

Can Netflix tell whether I am behind a VPN? [duplicate]

I understand that if I enable geolocation option in Firefox, then Netflix can learn where I am, and by comparing my actual location with my reported location, Netflix can deduce that I am behind a VPN....
1
vote
2answers
94 views

Infected employee using office VPN was part of a DDoS attack

Recently, our office VPN was taken down by our ISP after discovering a DDoS attack. Apparently an employee connected to our VPN is infected. There were no logs at the time of the event. Besides ...
1
vote
3answers
115 views

Is my company VPN the same as third-party VPN providers?

I'm just a bit confused with VPN. My company has VPN when I work remotely. So, I can access internal websites. However, does it mean if I browse my Internet over my company VPN, it will be as secured ...
1
vote
1answer
4k views

How to properly test that an OpenVPN connection is secured?

I have a router (ASUS RT-AC66U) with an embedded OpenVPN server. I'm able to successfully connect to the OpenVPN on the router, as well as, access internal services in my home network; However, ...
1
vote
1answer
1k views

“VPN -> Tor: Go to jail” - What's the logic behind this?

The VPN won't see anymore than your ISP already is. So even if the VPN was logging everything you did, shouldn't it just leave you in status quo? How can it ever compromise your identity, that you ...
1
vote
3answers
314 views

Howto pass overly protective corporate firewall

My Corporate Network was always being monitored, but a few days ago they started to block and censor all HTTPS traffic. Recently IT guys forged certificates for all major HTTPS web sites and acts as a ...
1
vote
2answers
335 views

Securing a VPN connection

I'm new to this we want to install a new VPN connection that will be used to connect using Internet to some networks in the office the contractor want to use a" Cisco NAC Network Module or Cisco IPS ...
1
vote
1answer
5k views

What are the risks of removing ISATAP from the default global block list?

The process of installing Microsofts pseudo VPN called Direct Access requires me to remove the ISATAP name from the default global block list by running this command: dnscmd /config /...
1
vote
1answer
32 views

What exactly does L2TP (over IPsec) mean?

I understand that one of the ways in which a VPN can be implemented is via L2TP over IPSEC. What does this mean exactly? I know that IPSEC is a network layer protocol. On the other hand L2TP is a data ...
1
vote
2answers
39 views

How does SFTP work? Please help someone [closed]

We run a system that automatically sends a swift message at the end of a process. But this messages are sent using FTP. We feel the FTP process is too prone to MITMA and wish to change the sending ...
1
vote
1answer
52 views

VPN / VPS and IP logs

Here's the situation: 1) I rent a VPS at a hoster and install VPN on it. 2) Completely disable all logs. Those logs that can not be disabled - permanently delete. 3) I connect to my VPS via VPN (...
1
vote
1answer
131 views

How did this site prevent me from creating multiple accounts?

Disclaimer: I just realized this question may read a little bit as if I'm trying to promote this site. I'm not. Now that I think about it, I'm unsure whether this site even has a proper license from ...
1
vote
1answer
96 views

VPN - Why is my NAT'ed Laptop being SSH-brute-forced by External IPs when in VPN?

I am using a commercial paid licence to a VPN provider, which I use on two boxes, a FreeBSD, and a Linux BackBox. When connected to this proxy, my interface receives a public IP from the VPN ...
1
vote
2answers
132 views

Shrewsoft VPN client calling home?

I received a notification from my firewall software that Shrewsoft's latest VPN client (version 2.2.2, released 2013-07-01) appears to be calling home. The ipseca.exe file included with the client is ...
1
vote
1answer
103 views

Does any VPN protocol authenticate the server?

When you connect to a server using SSL/TLS the client authenticates the server using the certificate that the server provides. If certificates mismatch an error page is shown instead. So you know you ...
1
vote
1answer
507 views

How to handle a remote office and a client requiring IP Whitelisting?

.NET Developer here, out of my comfort zone on this one. My software company is going remote, where employees can work from home, Starbucks, a Regus office, Spain, anywhere really. One of our ...