RE: CRIME Microsoft's VPN Client

From: Andrew Plato (aplato@private)
Date: Mon Mar 31 2003 - 13:10:20 PST

Next message: Andrew Plato: "CRIME Security Mailing Lists Come Under Fire"

Previous message: Jim Binkley: "Re: CRIME Microsoft's VPN Client"
Maybe in reply to: Currie, Kevin: "CRIME Microsoft's VPN Client"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

It's better than no VPN. 

The biggest problem is the other end - the Windows box that must host
the connection point. You really need to harden that box. Rip out
services, put some host-IDS on the box, etc. 

Alternatively, get a firewall (ie WatchGuard) that natively supports MS
VPN. 

___________________________________
Andrew Plato, CISSP
President / Principal Consultant
Anitian Corporation

Enterprise Security &
Infrastructure Solutions
 
503-644-5656 Office
503-644-8574 Fax
503-201-0821 Mobile
www.anitian.com 
___________________________________


> -----Original Message-----
> From: Currie, Kevin [mailto:kevin.currie@private] 
> Sent: Monday, March 31, 2003 10:08 AM
> To: crime@private
> Subject: CRIME Microsoft's VPN Client
> 
> 
> Any comments pro or con on Microsoft's free Microsoft's 
> L2TP/IPSec VPN Client?  
> 
>

Next message: Andrew Plato: "CRIME Security Mailing Lists Come Under Fire"
Previous message: Jim Binkley: "Re: CRIME Microsoft's VPN Client"
Maybe in reply to: Currie, Kevin: "CRIME Microsoft's VPN Client"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Mar 31 2003 - 13:52:31 PST