This tag is applied to questions related to various VPN types such as PPTP or IPSec.

learn more… | top users | synonyms

0
votes
3answers
93 views

Self-chosen fixed RSA PIN in addition to a Password

I'm using a Junos Pulse Secure Access Service (Juniper Networks), which requires to enter a RSA PIN in addition to the password. I don't know if this is always the case or if it's a custom ...
2
votes
2answers
155 views

Is a vpn connection through a proxy more secure?

At the moment there are a number of online services (Hide my ass or PIA) that offer some type of security through an VPN connection. This of course can work, but the big problem (for me at least) ...
1
vote
2answers
102 views

Certificate handling on a small network VPN

Background - I need to set up secure remote access for a small home office. I'm a bit of a noob and haven't needed to handle certificates before. I understand most of the setup but I want to ...
3
votes
1answer
60 views

Server side Client VPN management?

Is this possible, and how? Here's the scenario: Public Web Server hosts basic content for general public. Private server inside a VPN hosts special subscriber content and services. The two servers ...
3
votes
1answer
513 views

Is Two-way SSL sufficient for Multiple web servers communicating to each other?

I have a fixed number of web servers. Each web server represents a company and the users of the company talk to their assigned web server. I have this setup to decentralise the databases. So if one ...
1
vote
1answer
19 views

Does altering the routing table to my hub defeat the purpose of a VPN?

I am running a VPN on my server with openvpn. When running openvpn I have a shell script that runs afterwards: ip rule add from 192.168.0.19 table 128 ip route add table 128 to 192.168.0.0/24 dev ...
1
vote
1answer
83 views

VPN to protect traffic from one server to a remote site

I need to install a server at a customer's site (Site A) that needs to communicate securely to a network at another site (Site B). The communication between Site A and Site B is over the internet. ...
1
vote
1answer
50 views

IPSec Host-to-Host VPN (RedHat) needs IP Forwarding?

We would like to build a Host-to-Host IPSec VPN (both RedHat Linux). Is it really mandatory to activate IP Forwarding, which is by default deactivated because of our security policy (/etc/sysctl.conf ...
0
votes
1answer
27 views

Two Factor Authentication VPN

I have a VPN connections Site to Site VPN, for security reason, I want to add 2FA Can I set up 2FA on VPN ?
0
votes
1answer
39 views

How VPN software apps work?

I have seen cases where people install a VPN app on their phones to circumvent governments which bar access to certain websites (I have heard China is an example of this). I am curious how these apps ...
0
votes
1answer
66 views

Security hole when bridging OpenVPN tap interface with the same ethernet interface used to connect to the internet

I currently have the following network set up: A few desktops connect to my modem (which doubles as a Wifi router) via Ethernet cables. A few laptops connect to my modem via Wifi. All PCs are in the ...
-1
votes
1answer
66 views

Concern about potential of VPN access being restricted in Italy

Background: I work a remote employee in the US for a US based company. I log into our company's intranet via VPN to work every day. I also connect to multiple client networks via VPN (as well as using ...
-2
votes
1answer
167 views

Are VPNs for iPhones vulnerable to hacking?

I use VPNs all the time on my iPhone to get around websites being blocked and sometimes just for privacy, but are they secure? In this video the guy installed a certificate on the lady's phone that ...
4
votes
0answers
41 views

How does a website know my location? Checked with ipleaks and VPN seems to work correctly

Recently I have been using a VPN to watch a free web series available only in the US -- on a website called https://go90.com. Until a few days ago everything was running smoothly with just Hola VPN. ...
3
votes
0answers
142 views

How do i know when IPSEC Phase 2 Has completed with Openswan?

When I bring up a connection using openswan I get the following output but I don't see any ESP traffic through ports 50, 500 or 4500. # ipsec auto --up globacom-vpn 104 "globacom-vpn" #44: ...
3
votes
0answers
268 views

Some http requests are not send encrypted by vpn! Why?

I subscribed to a VPN service recently, and installed wireshark to take a look at the traffic sent from my computer. Practically all of it goes through UDP protocol, encrypted. But there are two HTTP ...
3
votes
0answers
67 views

What's The Easiest Way To Maintain Remote Users Access to a Webapp

Here is a real world case: A chain of high schools (several hundreds) has many websites (~ 3x number of Schools) that are content driven by users (the students). Every school maintains about 2-4 ...
2
votes
0answers
29 views

What are the security risks of using public address schemes for the DHCP of your VPN'd Users?

At the company I work for we recently purchased a network scanning tool to help with asset inventory and overall PC network management. My supervisor, while looking at the different IP address ranges ...
2
votes
0answers
69 views

How do nested vpns through VM work?

Let's say I have 2 different VPN services (vpn1 and vpn2) both using OpenVPN and a Linux host running a guest VM. Now let's suppose I connect from the Linux host to vpn1. Then I connect from the ...
2
votes
0answers
178 views

How secure is L2TP+IPSEC?

I understand PPTP is widely used still, but insecure. A convenient alternative is: L2TP+IPSEC. How secure is it? What steps in the server setup can I take to maintain a high degree of compatibility ...
1
vote
0answers
48 views

Are there any benefits in using VPN service for application with SSL pinning?

I understand how using a public VPN service can make network connectivity more secure in case of HTTP, or even HTTPS a without certificate pinning in place. Suppose we have a fat client application ...
1
vote
0answers
45 views

VPN chain in one machine without VM natively

Is it any way to make VPN chain in one machine (MAC or WIN) without VM natively (L2TP/IPsec)? I need this for obtain an extra layer of security. For example - if one VPN turns off I still have ...
1
vote
0answers
22 views

Information and Settings Collected from a PC Connected to a Web Server

1- What are the information and settings collected from my pc when I connect to a website server? 2- When I connect through a VPN, Could the website server detect a mismatch between my new location ...
1
vote
0answers
25 views

Azure Networking VPN

Company is exploring the option of connecting Azure VNET to the on premise network using either Site-to-Site or ExpressRoute. There are concerns regarding potential vulnerability of internal resources ...
1
vote
0answers
24 views

Why can't VPN extensions filter everything in the browser?

For example, when I'm using one of this extensions, such as ZenMate or Browsec, I'm not able to watch video streamings. Or another thing that happened is my internet provider detecting me going on a ...
1
vote
0answers
90 views

Is a NAS vulnerable when VPN'd through dedicated server?

I'm concerned about the security of part of my home setup, but I'm quite unfamiliar with a lot of this so I thought I'd start out by saying what I'm trying to do, in case my solution is a poor one in ...
1
vote
0answers
360 views

VPN Server + Anonymity + Adblock for mobile Devices

In order to improve private security and anonymity while browsing the web on my mobile devices I wanted to tunnel all traffic to my own server via VPN and use a proxy software to filter unwanted (...
1
vote
0answers
333 views

Configure icefloor to prevent leaks when VPN connected

I am trying to configure icefloor firewall on OS X 10.9 so as to make sure all traffic will go through VPN. I recently notified that even with "Route all traffic through vpn" option in tunnelblick ...
1
vote
0answers
898 views

How to securely delete an OpenVPN connection profile

I store my OpenVPN profile (keys) in an encrypted drive but I run OpenVPN inside an OS that is not encrypted. When I finish my OpenVPN session and disconnect, the connection profiles are still there (...
1
vote
0answers
158 views

Are VPNs using shared secret susceptible to trivial MITM attacks

I'm looking at a few VPN providers and many seem to offer L2TP VPN but they seem to share their shared secrets publicly on their website, for example : Goldenfrog https://www.goldenfrog.com/support/...
0
votes
0answers
31 views

Is it a bad idea to have a public facing server being logged in in my Windows Server 2012 Essentials VPN?

I've got a home network setup with a Windows Server 2012 R2 Essentials which is accessible via the *.remotewebaccess.com service. I'm also having a Windows virtual server that's obviously publicly ...
0
votes
0answers
19 views

Hamachi as a way to access home vCal / vCard server - security risk?

I have a home server providing a way to sync contacts and calendars between my machines. Until now, I was using it only with computers in my LAN, but recently I need to sync a computer that is on ...
0
votes
0answers
52 views

What is the difference between traffic co-relation attack and timing attack?(with relation to VPN or TOR)

Till what I have understood of timing attack is that I send 5Mb request and my VPN also sends a 5Mb request(the adversary present at both the ends i.e my ISP and VPN's end,hence the adversary finding ...
0
votes
0answers
44 views

VPN and traffic filtering

VPN server assigns to the client public ip address and doesn't offer NAT function. In this case, can firewall on the client side to filter (inspect) VPN traffic (L2TP/IPSec, IKEv2, SSTP, OpenVPN)? I ...
0
votes
0answers
193 views

Gargoyle (OpenWRT) firewall routing for VPN

At present I have Gargoyle setup on my WNDR3700 to connection to a VPN provider in order to provide a little privacy. However this prevents me from connecting remotely to my home network. Previously I ...
0
votes
0answers
126 views

VPN daisy-chaining via Virtual Machines

Assume that my host is a Windows computer. I have Virtualbox installed and I put on it another Windows guest. Assuming I connect with my host to a VPN provider called "A" with OpenVPN and with my ...
0
votes
0answers
95 views

VPN Server Inside VPN client on Router

This is a different context of an already asked question: In a few words: Sub-VPN or VPN SubNetwork... VPNsception? So I am using DD-WRT flashed router which connects as a client to VPN server "...
0
votes
0answers
111 views

Adobe Flash-based site's UI misbehaves when it's accessed through a VPN. Is it leaking my real ip address?

Here is a setup: A Linux/Windows VM at home (will call it "hidden VM" from now on) which is placed into an isolated environment (it's located in its own isolated virtual network, and the only way ...
0
votes
0answers
121 views

How can secure email be used while avoiding government attention?

Presumably all unencrypted email is available to federal agencies including IP addresses, header information, and email content (eg, through SMTP with or without SSL and TLS -- thunderbird has an SSL/...
0
votes
0answers
107 views

Theoretical VPN and Tor Encryption Chain

Okay, so I've been looking around at the benefits of using tor to access you vpn and vice versa. Here's what I've come up with: VPN -> Tor Pros: Hides Tor usages from isp Hides your activities ...