SV: Phone based VPN access

Hi!

The most immediate risk that comes to mind (assuming that it's a mobile
phone?) is that the employee might loose the phone or get it stolen.

Whoever that finds the phone (or have physical access to it) can easily get
the username and, possibly, decrypt or crack the password.

What's the type of phone, brand and model?

//Daniel Nyström <daniel.nystrom@xxxxxxxxx>

-----Ursprungligt meddelande-----
Från: Securi Net [mailto:securinet2004@xxxxxxxx]
Skickat: den 10 januari 2006 18:32
Till: security-basics@xxxxxxxxxxxxxxxxx
Ämne: Phone based VPN access

Hi list members,

We have recently received a request to facilitate vpn
access via a vpn capable phone for an employee.

Are there any inherrent risks in facilitating such
access. Are there any known exploits or basic holes
that we should watch out for?

Thanks in advance for any feedback.

Regards

CP






__________________________________________________________
Find your next car at http://autos.yahoo.ca

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,

Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------

Relevant Pages

  • RE: Windows Log
    ... > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... > The Norwich University program offers unparalleled Infosec management ... > education and the case study affords you unmatched consulting experience. ... > Computer Emergency Response Teams, ...
    (Security-Basics)
  • RE: Re: University Degree or CISSP
    ... Subject: Re: Re: University Degree or CISSP ... > And a college education will benefit you until the day you die. ... >> Planning, Computer Emergency Response Teams, and Digital Investigations. ... >> The Norwich University program offers unparalleled Infosec management ...
    (Security-Basics)
  • Re: Securing Blackberries
    ... > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... > The Norwich University program offers unparalleled Infosec management ... > Tailor your education to your own professional goals with degree ... > Computer Emergency Response Teams, ...
    (Security-Basics)
  • Re: Windows Log
    ... >> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... >> The Norwich University program offers unparalleled Infosec management ... >> education and the case study affords you unmatched consulting experience. ... >> Computer Emergency Response Teams, ...
    (Security-Basics)
  • Re: Securing Blackberries
    ... > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... > The Norwich University program offers unparalleled Infosec management ... > Tailor your education to your own professional goals with degree ... > Computer Emergency Response Teams, ...
    (Security-Basics)
Loading