pen-test
[Top] [All Lists]

Re: Security and VPN

To: "Sohail Sarwar" <ssarwar@ecredit.com>, "James Patterson" <jimp.securityfocus@gmail.com>, pen-test@securityfocus.com
Subject: Re: Security and VPN
From: "Matthew Leeds" <mleeds@theleeds.net>
Date: Mon, 18 Jun 2007 21:32:30 -0700
Cc: holstein.robert@bls.gov
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
In-reply-to: <BF81C31B1C79FC4090A15FFCEAAFF16C01B929F7@ADMW-US-EXCHSRV.us.ecredit.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <BF81C31B1C79FC4090A15FFCEAAFF16C01B929F7@ADMW-US-EXCHSRV.us.ecredit.com>
Reply-to: mleeds@theleeds.net
Resent-date: Tue, 19 Jun 2007 15:58:18 -0600 (MDT)
Resent-from: pen-test-return-1078484392@securityfocus.com
Resent-message-id: <20070619215818.28ECB237409@outgoing3.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
In general, if you're offering IPSEC VPN, you're extending the wire at your 
office to the home. Whatever policy you have for the office you now need to 
extend to the home.

Password access to log into the computer.
Firewall.
Anti-virus.

and so on.

---Matthew
*********** REPLY SEPARATOR  ***********

On 6/18/2007 at 9:08 AM Sohail Sarwar wrote:

>Hi there,
>
>       I just wanted to put this out there.  How secure is VPN.
>Meaning, if my users take home the client and install it on their
>desktop at home, and connect to the corporate network and production
>network, wheat are we really looking at.  Are they secure or not.
>
>       Two factor authentication would only help the authentication
>purpose and to protect the user name and password ?
>
>       How about restricting them to access, and how about worrying
>about their home computer that can be effected.
>
>       Has anyone been through this.  Any one give home users a list of
>requirements that they must have before vpn can be offered to them ?
>
>       Should there be some type of desktop policy installed on their
>home computer, just to protect the company network ?  Any help and
>guidance would be great
>
>Regards,
>Sohail
>
>------------------------------------------------------------------------
>This List Sponsored by: Cenzic
>
>Are you using SPI, Watchfire or WhiteHat?
>Consider getting clear vision with Cenzic
>See HOW Now with our 20/20 program!
>
>http://www.cenzic.com/c/2020
>------------------------------------------------------------------------




------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>