Re: VPN Security.
From: Chris Leiter (cjleiter_at_hotmail.com)
Date: 07/19/05
- Next message: Steven L Umbach: "Re: VPN Security."
- Previous message: dx505_at_yahoo.co.jp: "RPC service property"
- In reply to: Jarryd: "VPN Security."
- Next in thread: Steven L Umbach: "Re: VPN Security."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 19 Jul 2005 08:54:32 -0700
Depending on who you ask, this could get sticky.
First of all, there's no such thing as a "hardware" vpn solution. All VPN
devices must use some kind of software to control access to the network.
The question really becomes, do I buy a product that is a dedicated VPN
solution, or do I continue using the product I have.
A couple of questions you might want to ask yourself include:
Is it worth the monetary and administrative cost to set up a new VPN
solution?
Is the product really more secure? How many IOS updates have there been
for it within the last couple of years?
Can it offer Quarantine Services (or something similar) to protect my
internal network (2K3 can!)
I would say if you've dedicated your win2k3 server to the VPN solution, and
have taken the necessary precautions to secure it (i.e. disabling any
unnecessary services and keeping the software up to date), there's no need
to reinvent the wheel.
Products like Firewalls, routers, and VPN concentrators are only as secure
as the administrator who maintains them makes them.
Just my $0.02
Chris Leiter
"Jarryd" <Jarryd@youllneverknow.com> wrote in message
news:OXUzh3DjFHA.3256@TK2MSFTNGP12.phx.gbl...
> Hi,
>
> I have a Windows Server 2003 machine configured as a VPN server. Access
> is restricted to L2TP IPSec using MS-CHAP v2 only and users of the VPN
> security group. Is there anything else that I can do to make it more
> secure. I am also wondering about getting a hardware VPN. I am using the
> MS one and it is working very well, but if a hardware solution is really
> that much more secure then I suppose it is worth shelling out a bit more.
> So what I am looking for is educated opinions on the matter.
>
> TIA,
>
> Jarryd
>
- Next message: Steven L Umbach: "Re: VPN Security."
- Previous message: dx505_at_yahoo.co.jp: "RPC service property"
- In reply to: Jarryd: "VPN Security."
- Next in thread: Steven L Umbach: "Re: VPN Security."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
