Home page logo
/

basics logo Security Basics mailing list archives

RE: DMZ and VPN
From: "John Tolmachoff" <sflist-secbasic () reliance net>
Date: Tue, 18 Feb 2003 09:29:45 -0800

How do you solve that one?

By using a firewall in addition to RRAS. RRAS only determines what packet
goes where. You still need to filter and check those packets.

This is one of my complaints of allowing RRAS to create an VPN endpoint. It
can give someone a false sense of security. If the RRAS server becomes
compromised, so is the VPN traffic as well as the network behind the VPN
endpoint.

IMO, using RRAS as a VPN endpoint should not be used in conjunction with a
DMZ zone, only behind a firewall.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]