bheroniphr
asked on
How secure is PPTP for me to use for our users?
Hi,
We are a software development firm and have highly valuable assets in development on our network.
I am looking at enabling a limited number of users on VPN and am concerned about potential security issues.
We run a 2003 domain behind a WatchGuard X550e firewall. I have an IPSec tunnel already running between ourselves and one of our development partners who run a much larger network than ours (we have ~50 users).
I have licenses for 5 IPSec tunnels I can use but I was hoping to be able to use PPTP as all our systems are Windows. I will use our DC as the authentication server.
Can anyone briefly explain any security issues I may find in enabling PPTP VPN? One thing I am concerned about is could somebody not spoof an employee's home IP (I will restrict access by users IP on the firewall). If they can spoof then the users password will be the only obstacle for a potential hacker...
Thanks in advance.
Ben
We are a software development firm and have highly valuable assets in development on our network.
I am looking at enabling a limited number of users on VPN and am concerned about potential security issues.
We run a 2003 domain behind a WatchGuard X550e firewall. I have an IPSec tunnel already running between ourselves and one of our development partners who run a much larger network than ours (we have ~50 users).
I have licenses for 5 IPSec tunnels I can use but I was hoping to be able to use PPTP as all our systems are Windows. I will use our DC as the authentication server.
Can anyone briefly explain any security issues I may find in enabling PPTP VPN? One thing I am concerned about is could somebody not spoof an employee's home IP (I will restrict access by users IP on the firewall). If they can spoof then the users password will be the only obstacle for a potential hacker...
Thanks in advance.
Ben
L2TP is more secure as it actually authenticates the endpoints. That said PPTP is pretty good and is more widly supported,
No question IPSec is far more secure but as suggested by KCTS, PPTP is a quite accepted protocol. However, if concerned you may want to read the following regarding PPTP security. It may make you a little paranoid <G>:
http://www.net.princeton.edu/vpn/pptp.html#security
http://www.net.princeton.edu/vpn/pptp.html#security
ASKER
Hi Guys,
Thanks for these responses but I was hoping to maybe get a little more about the possibility of spoofing and ways to prevent hacks.
In terms of the encryption, I'm cool with this as I can use PPTP, L2TP or IPSec. However, all of these are vunerable to spoofing. At least that's what I'm worried about.
Can anyone explain how this could be possible (or impossible0 and ways to protect against it?
Thanks
Thanks for these responses but I was hoping to maybe get a little more about the possibility of spoofing and ways to prevent hacks.
In terms of the encryption, I'm cool with this as I can use PPTP, L2TP or IPSec. However, all of these are vunerable to spoofing. At least that's what I'm worried about.
Can anyone explain how this could be possible (or impossible0 and ways to protect against it?
Thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Thanks bheroniphr,
Cheers !
--Rob
Cheers !
--Rob