Re: is pptp via VPN secured ?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I've googled around quickly, and found this:
http://www.citrix.com/site/jumpPage.asp?pageID=20347

The following list of countries may have export or import restrictions for
products containing strong (128-bit or greater) encryption.
Armenia, Azerbaijan, Belarus, Burma, Congo (Democratic Republic of), Cuba,
Egypt, France, Hong Kong, Iran, Israel, Kazakhstan, Liberia, Libya, Moldova,
Nagorno-Karabakh, North Korea, Pakistan, Philippines, Poland, Russia,
Rwanda, Saudi Arabia, Sierra Leone, Somalia, Sudan, Syria, Ukraine, Vietnam,
Yemen.

But you may want to Google a bit more, I used the keywords 'restriction
encryption import countries'

On the issue of CA's it depends how your infrastructure is setup, and what
sort of CA you run, and what firewall/vpn you have. We use ISA 2004, and
have an enterprise CA, which issued the machine certificates for the VPN,
I'm not sure if this is possible using your Netgear firewall/vpn solution.
If you were running 2 ISA VPN solutions, then you'd just issue 2
certificates for the machines, (don't think it even has to be an enterprise
CA, could be a standalone CA), then import those certificates into the ISA
boxes, and the VPN should work, as the 2 certificates both have the same
trusted root.

Ben


"Ahmad Sabry El Gendi" <AhmadSabry@abc> wrote in message
news:OfZGD0JNHHA.4720@xxxxxxxxxxxxxxxxxxxxxxx
Thanks Mr Ben
ok i'll use PPTP temporarly ... with the MS-Chapv2
it was working fine as a test.
** but i'm not aware of my country encryption levels may yuou forward me
to somewhere to have more info in this issue ?
** something else ... i read a little bit about L2TP
if i setup a a local CA in denver server & imported it in the egypt server
side will it woek fine or there's another reqiurements ?
thanx
A.Sabry
"Ben" <benb@xxxxxxxxxxxxxxxx> wrote in message
news:euTRkPANHHA.1240@xxxxxxxxxxxxxxxxxxxxxxx
"Ahmad Sabry El Gendi" <AhmadSabry@abc> wrote in message
news:ua3LFy%23MHHA.5000@xxxxxxxxxxxxxxxxxxxxxxx
Hi
i suppose to mak VPN from denver to cairo but i'm wondering is the
authentication process encrypted using PPTP ?
my servers in 2 locations are behind a hardware router also i've 2
firewall (ISA & Netgear in cairo)
can i go with PPTP safely ?
thanks for help


It's not as secure as L2TP. But really you should be more worried about
the authentication method, make sure you are using minimum MS-CHAPv2, or
preferably EAP with 2 token authentication, such as smartcards!
Also, make sure you have the right encryption for your country, I'm not
sure what the government policy is in Egypt, but some countries ban
encryption above 40 or 56 bit (can't remember which).
Ben





.

Relevant Pages

  • How to process Partners certificates with CryptoAPI
    ... We have an application that is distributed in different countries... ... This application will have a encryption module developped with the CryptoAPI ... This module will basically get the partner certificate ... certificates files or is it mandatory to register ...
    (microsoft.public.security)
  • How to process Partners certificates with CryptoAPI
    ... We have an application that is distributed in different countries... ... This application will have a encryption module developped with the CryptoAPI ... This module will basically get the partner certificate ... certificates files or is it mandatory to register ...
    (microsoft.public.win2000.security)
  • Re: Newsgroup filtering with host server software
    ... up an SSL mail server on a odd port, the authorities in thouse countries ... access an SSL-encrypted mail server back at company headquarters. ... I use heavy encryption when I go to China to broadcast ...
    (comp.security.firewalls)
  • Re: Why do encryption laws exist?
    ... truth is I can only find one reason for governments to maintain ... not to mention a lot of laws written don't cover ... So who does an encryption law prevent from getting a strong encryption ... The only real purpose it may serve is some countries that want to keep ...
    (sci.crypt)
  • Re: Crypto Exporting..
    ... If you use existing encryption features found in many ... For instance, Microsoft Outlook ... software,and even cryptographic consulting services still ... by or notification to BIS prior to export to most countries. ...
    (misc.news.internet.discuss)