Re: VPN PPTP on 2003 server wont connect remotely, but will if on same network.. Assistance?

On Jul 17, 1:24 am, "Phillip Windell" <philwind...@xxxxxxxxxxx> wrote:
"markm75" <markm...@xxxxxxx> wrote in message

news:1184636472.908498.203980@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

On Jul 12, 9:52 pm, "Robert L [MVP - Networking]"
<nore...@xxxxxxxxxxx> wrote:
Thank you for the update.

Just curious.. are you or anyone else out there aware of the security
implications of using PPTP? IE: Is it true the password is sent in
clear text, the only insecure part, after that its very secure?

That depends on the device providing the PPTP/VPN. MS products, RRAS &
ISA provide a multiude of authentication choices,...it really isn't about
PPTP itself.

Is one solution which gets closer to the security of ipsec, to use EAP
with a certificate (somehow)?

That would be L2TP instead of PPTP

IPSec secured VPN is used for Site-to-Site VPNs (aka Router-to-Router VPNs)
L2TP secured VPN is primarily used for Remote Access VPN.
PPTP is commonly used for both Remote Access VPN and Site-toSite VPNs.

All are encryped & encapsulated,...it is just a debate of methods and
degrees.

--
Phillip Windellwww.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

Ah ok, so I should try switching to L2TP on the MS server side
settings, this would be the more secure way to go, short of
proprietary router vpn and software.

We aren't doing router to router.. just router to client type setups.

Currently we use a 460R router from Symantec, which will only work
with their proprietary VPN ipsec software.. so for Vista there is no
client. Hence I had setup the Microsoft PPTP vpn ability through one
of our servers.

I guess the other option is to find a better gateway that supports SSL
(and is dual wan), more universal, no software dependencies.


.

Relevant Pages

  • Re: Unable to make VPN connection to ISA 2006 Standard
    ... Router and the isa server this nat enabled, then the pptp tunnel will fail? ... If i initialize an vpn connection with a windows client, ...
    (microsoft.public.isa.vpn)
  • Re: Linksys router settings
    ... I had a Linksys router not function like this when I had PPTP and IPSec ... > POrt Range: I've inserted these in when they weren't showing on the UPnP ... >> when set up incoming VPN connection on SBS 2003. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN connection problem using NTL
    ... I'm not sure about the encapsulation though - we are using a PPTP ... I use PPTP through a Vigor router to connect to a VPN managed by another ... Vigor router at the server site. ...
    (uk.telecom.broadband)
  • Re: How to get VPN working
    ... the test detailed in the "VPN Traffic" section of this article... ... firmware versions simply do not allow GRE Protocol 47 traffic through the router while others do. ... Linksys calls that "PPTP Pass Through" by the way. ... > I managed to get the box pop up to at least try by going to Network ...
    (microsoft.public.pocketpc.activesync)
  • Re: Vpn set up
    ... Some routers enable GRE Protocol 47 traffic with a "PPTP Pass Through" or ... "VPN Pass Through" setting. ... can be highly dependent on firmware in the router. ... >> If you are using PPTP for the VPN, besides opening TCP port 1723 for the ...
    (microsoft.public.pocketpc)