Questions tagged [pptp]

The Point-to-Point Tunneling Protocol is a method used to implement virtual private networks. The RFC can be found here: http://tools.ietf.org/html/rfc2637. PPTP is (as of Oct 2012) considered cryptographically broken and its use is no longer recommended by Microsoft.

Filter by
Sorted by
Tagged with
1
vote
1answer
374 views

Could PPTP be considered a secure VPN type with idle timeout 0?

Ive got a Draytek router which im trying to setup as a VPN host. The options i have are : PPTP IPSEC LT2P with IPSEC policy SSL My VPN client only seems to supported PPTP and LT2P with IPSEC ...
4
votes
2answers
838 views

Should I tell my boss the company's VPN is not secure?

I work in a small company and we have recently invested in a new server that provides VPN services. I contacted the IT company in charge today in order to connect my laptop so I can work from home. I ...
4
votes
0answers
178 views

Is it possible to implement a downgrade attack to pptp vpn?

There are many materials about the Dictionary attack or bit-flipping attack to PPTP VPN. But is it possible to implement a downgrade attack to pptp. This is a picture showing how to implement a ...
1
vote
3answers
377 views

How to secure clear text data that is transmitted through LAN / Wireless LAN connection and PPTP VPN without a domain name (IP address only)

We use Odoo ERP in our office and there is a statement in the documentation which says: Whether it's accessed via website/web client or the webservice, Odoo transmits authentication information ...
1
vote
1answer
242 views

Does any VPN protocol authenticate the server?

When you connect to a server using SSL/TLS the client authenticates the server using the certificate that the server provides. If certificates mismatch an error page is shown instead. So you know you ...
1
vote
1answer
994 views

Can I use a VPN to disguise internet traffic at work? [closed]

I have seen this question asked before; I want to know if I can use a VPN to disguise my internet traffic so my employer can't see what websites I'm visiting while at work. However, unlike most people,...
2
votes
2answers
111 views

Can a website detect which method you are using to connect (LL2P, SSTP and PPTP)

When you connect to a website using a VPN with the same IP however using a different type of connection each time (LL2P, SSTP and PPTP) can the website detect the difference between these connection. ...
5
votes
1answer
2k views

Does using NAT-T for L2TP / IPsec VPN pose a realistic security risk?

I'm working on upgrading an old Windows RAS server that hosts PPTP VPN. I want to move to a L2TP/IPsec VPN. Due to the firewall appliance we use, the VPN server has to be behind a NAT. This means ...
3
votes
2answers
1k views

Skype Audio / Video Session over VPN?

Basically I'm wondering if a Skype video session along with audio could be logged (or recorded) over a virtual private network? I know whoever hosts the VPN server can log which websites you visit (or ...
9
votes
1answer
26k views

Is PPTP VPN ever secure? Under DD-WRT? [duplicate]

PPTP is not an open, ratified standard the way that, for example, SSL/TLS is. (see: http://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_1.2 and http://datatracker.ietf.org/doc/rfc5246/ ) The ...
0
votes
1answer
72 views

PPTP and Split Routing

If I uncheck the "use default gateway on remote network" to be able to browse local shares and the internet at the same time, does that void encryption?
30
votes
2answers
32k views

Are there any known vulnerabilities in PPTP VPNs when configured properly?

PPTP is the only VPN protocol supported by some devices (for example, the Asus RT-AC66U WiFi router). If PPTP is configured to only use the most secure options, does its use present any security ...
8
votes
1answer
24k views

How can I tell if a PPTP tunnel is secure?

PPTP has been demonstrated to be broken in many ways, and most installations are insecure. But it is also theoretically not broken if configured correctly. As an end-user, is there a simple way for ...