VPN security

[mrkangaroo]

I am setting up a VPN through my firewall. I would like to know the opinions of other users out there on how secure VPN's are and if they aren't how they can be made secure.

[avdven]

VPN, if set up properly can be quite secure (though nothing is impenetrable). What OS(s) are you planning on using for the VPN? Also, are you setting up a hardware VPN solution or a software solution?

Here are some links which may help you get started:

Professor Windows - VPN (http://www.microsoft.com/technet/treeview/default.asp?url=/TechNet/columns/profwin/pw0201.asp)
Windows 2000 VPN (http://www.labmice.net/networking/vpn.htm)
Windows XP VPN Security (http://www.microsoft.com/windowsxp/expertzone/columns/russel/december03.asp)
VPN Security (http://rr.sans.org/encryption/VPN_sec.php)
VPN Guides (http://searchnetworking.techtarget.com/featuredTopic/0,290042,sid7_gci812667,00.html)
VPN Info (http://vpn.shmoo.com/)

AJ

[mrkangaroo]

Windows 2000 will be the operating system that the user have. The actual firebox is handeling the VPN tunnell

[Palemoon]

I have found one of the most diffcult thing to do in a VPN connect is that you may not have control over what the end user always does. For example lap tops you install and configure the OS for the VPN etc and all works well during testing. Usually the users has elevated rights both at the firewall and their lap top? Unless you can control the end PC or lap top rights and policies fully then it can be secure if their son or daughter use the PC lap top to surf and do their thing you got a ton of problems. Emote users are diffcult to control even more so if they have senior status where you work and demand local admin rights on their systems but are totally lame users.