Re: Problem w/symantec firewall & SSH Tunnel



Short definition of VPN (BTW you can probably get a better definition at
www.wikipedia.org).

VPN stands for virtual private network. It acts like a secure hardwired
network connection between two computers and creates a virtual (software
based) network adapter on both. All network traffic on that interface is
encrypted and tunneled over another network such as the Internet.
Functionally it really is just like having a hardwire between the two
computers and it's just as secure.

I use OpenVPN even though it's not as simple to set up as the one MS
provides with WinXP because it was more configurable. In other words it
allowed me to choose which TCP port # to tunnel through. The MS one does
not and my company's firewall blocks the port it uses. Either VPN
however is as secure as you're going to get. Nobody is going to see the
data being sent back and forth. Now if someone installs malware on one
of the computers it can access the data just like any other program can.

The MS VPN uses a protocol called IPSEC. OpenVPN uses one called SSL. If
SSL is ever cracked, we have a lot more to worry about then who's going
to snoop the traffic to your little PC though. It's the protocol that's
uses to secure almost all sensitive data on the Internet. In other words
if it ever gets cracked we're all in deep doodoo.

OpenVPN did not have an easy to use wizard to set it up, but the
how-to's on the Internet, and comments in the config files were very
helpful.

SSH tunneling is similar in that it creates a secure channel over
another network such as the Internet. It's different in that it's not a
virtual network adapter. Instead it forwards only the specified TCP
ports to a remote server. It too is considered secure. Secure enough
that the company I work for exchanges sensitive financial data every day
with our trading partners using it.

HTH.

BTW is the service LogMeIn.com? I use that sometimes for remote control
of my home computer. I prefer to use other solutions only because there
is a third party involved and I don't know how much I can trust them.
But if I'm on a public computer and don't have my other VPN or ssh
software installed, I can still access my home computer.
--
To reply by email remove "_nospam"
.



Relevant Pages

  • RE: [Full-Disclosure] CISCO Vpn
    ... Citrix Secure gateway.. ... >>I have been asked what the PROs and CONs of setting up a vpn would be. ... > the inside of the network between your Cisco VPN device and the internal ... Also consider that a home system will ...
    (Full-Disclosure)
  • RE: VPN and Security
    ... Do you mean for a more secure setup he should split tunnel? ... the split tunneling makes me think 'less secure' precisely ... network printer or accessing a share on the file server at the office. ... Subject: VPN and Security ...
    (Security-Basics)
  • Re: RWW revisited
    ... RDP doesn't expose the target network to the client unless you ... maniuplating the remote via the images. ... done from an untrusted client (neither should VPN). ... >> You wanted to know how secure RWW was and I'm comparing to a VPN ...
    (microsoft.public.windows.server.sbs)
  • Re: Networks
    ... > of USB, isn't it, to link computers together, like the Mac. ... > why is there not a default that says 'Click here to set up USB 2 network'? ... > Sinclair, also 1984, used audio jackplugs on cables to do the same thing. ... >> that setting up a VPN over USB is not at the top of the list. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Networks
    ... Hi Kerry - I call it a VPN because that is what the suppliers of the cable ... I didn't say it was an uncommon setup - I just said no-one in the network ... USB, isn't it, to link computers together, like the Mac. ... Sinclair, also 1984, used audio jackplugs on cables to do the same thing. ...
    (microsoft.public.windowsxp.network_web)

Quantcast