?
Solved

Windows Server vs Router VPN

Posted on 2011-03-08
4
Medium Priority
?
678 Views
Last Modified: 2012-05-11
Hi

I need an advice. I got a Cisco 891 router and a Windows Server 2008, who is essentialy a file server.

Should i put the VPN server on my Cisco router or on my Windows Server. The advantages of my windows server is that the VPN users are aleready in the server. But is it less secure ?

Thanks
0
Comment
Question by:caclement
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 70

Expert Comment

by:Qlemo
ID: 35072348
If you use PPTP for dial-in connections - yes, that is less secure. Security strictly depends on the length and complexity of the password with PPTP. Further PPTP behind a NAT device is subject to failures for many different reasons, so you might get an unreliable solution.

However, Cisco VPN (using IPSec) requires you to use a VPN Client on each PC. Though you can use the free ShrewSoft VPN, it's still a 3rd-party application needed on each PC. Usually it works much better than PPTP, and is more secure anyway.
0
 

Author Comment

by:caclement
ID: 35072472
What about L2TP and SSTP ? I heard they are more secure and works with windows server 2008.
0
 
LVL 70

Accepted Solution

by:
Qlemo earned 200 total points
ID: 35074664
SSTP can only be used starting with Vista/W2008. It is based on SSL, and hence more secure than PPTP. I don't know if it is more reliable than PPTP, but assume it is.
L2TP is usually a PITA, security wise, when applied to Windows. You either need to use Computer Certificates, or a pre-shared-key, which then needs to be the same for all incoming connections.
0
 

Author Comment

by:caclement
ID: 35074914
Thanks !
0

Featured Post

Four New Appliances. Same Industry-leading Speeds.

But don't take it from us.  The Firebox M370 is Miercom tested and Miercom approved, outperforming its competitors for stateless and stateful traffic throughput scenarios.  Learn more about the M370, M470, M570 and M670 and find the right solution for your organization today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question