Tag Info

New answers tagged


I have just established an IPSEC site-to-site VPN that required some ExtendedKeyUsage and I did some research on it. The ExtendedKeyUsage for Internet Key Exchange were deprecated by RFC4945 The CA SHOULD NOT include the ExtendedKeyUsage (EKU) extension in certificates for use with IKE. Note that there were three IPsec- related object identifiers ...


Is using L2TP/IPsec VPN over NAT-T actually insecure, or is this only a theoretical risk? Microsoft says Yes and No: Yes in case this scenario applies on you: A network address translator is configured to map IKE and IPSec NAT-T traffic to a server on a NAT-configured network. (This server is Server 1.) The network address translator ...

Top 50 recent answers are included