How Secure Is The Built-In VPN Client/Server in XP?

How Secure Is The Built-In VPN Client/Server in XP?

NewsGroups | Search | Tools
 comp.dcom.vpn  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
How Secure Is The Built-In VPN Client/Server in XP? monkey.omen 12-29-2005
Posted by on December 29, 2005, 3:45 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I'm very new to VPNs (ie, less than 48 hours) and I just set up a
simple VPN between two XP computers, and was surprised how easy it was.

On my end, I have an XP Home laptop running the built-in VPN server -
it shows up in Network Connections under "Incoming" and is set to:
- allow callers to access my local area network
- specifiy TCP/IP addresses from 10.0.0.1 through 10.0.0.10
- allow calling computer to specify its own IP address

On the other end is an XP Professional laptop that is set up as a
client - it shows up in Network Connections under "Virtual Private
Network" and calls itself a WAN Miniport (PPTP) device.

When the client connects, it logs in without complaint, gets the
address of 10.0.0.4 and is able to communicate with the server at
10.0.0.1. I'm assuming this is all done over the encrypted tunnel
between the two systems.


I have these questions:

Regarding the client setup, under the "security" tab of the properties
dialog, under the "Advanced (custom settings)" area, there are a few
options. What is the difference between these two options under data
encryption?
- require encryption (disconnect if server declines)
- Maximum strength encryption (disconnect if server declines)
I'm looking for bits, algorithm, differences in key exchange, etc. I'm
no crypto expert but I did read Applied Cryptography while staying at a
Holiday Inn Express once, so I'm not completely clueless.


Are XP's VPN client/server believed to be reasonably secure, or are
they like so many other Windows products in that there are constant
streams of bugs, endless vulnerabilities, poor implementations of good
ideas, etc that hinder security?


I'm not going to send nuclear bomb plans over this connection (I have
carrier pigeons for that) but I'd like to know whether or not the
Windows XP VPN software is worthwhile, or if it's just pretend security
that uses triple-ROT13.

Thank you in advance.


NMFall 20%
Posted by Simon on December 31, 2005, 8:27 am
If you were  Registered and logged in, you could reply and use other advanced thread options
monkey.omen@gmail.com wrote:
> I'm very new to VPNs (ie, less than 48 hours) and I just set up a
> simple VPN between two XP computers, and was surprised how easy it was.
>
> On my end, I have an XP Home laptop running the built-in VPN server -
> it shows up in Network Connections under "Incoming" and is set to:
> - allow callers to access my local area network
> - specifiy TCP/IP addresses from 10.0.0.1 through 10.0.0.10
> - allow calling computer to specify its own IP address
>
> On the other end is an XP Professional laptop that is set up as a
> client - it shows up in Network Connections under "Virtual Private
> Network" and calls itself a WAN Miniport (PPTP) device.
>
> When the client connects, it logs in without complaint, gets the
> address of 10.0.0.4 and is able to communicate with the server at
> 10.0.0.1. I'm assuming this is all done over the encrypted tunnel
> between the two systems.
>
>
> I have these questions:
>
> Regarding the client setup, under the "security" tab of the properties
> dialog, under the "Advanced (custom settings)" area, there are a few
> options. What is the difference between these two options under data
> encryption?
> - require encryption (disconnect if server declines)
> - Maximum strength encryption (disconnect if server declines)
> I'm looking for bits, algorithm, differences in key exchange, etc. I'm
> no crypto expert but I did read Applied Cryptography while staying at a
> Holiday Inn Express once, so I'm not completely clueless.
>
>
> Are XP's VPN client/server believed to be reasonably secure, or are
> they like so many other Windows products in that there are constant
> streams of bugs, endless vulnerabilities, poor implementations of good
> ideas, etc that hinder security?
>
>
> I'm not going to send nuclear bomb plans over this connection (I have
> carrier pigeons for that) but I'd like to know whether or not the
> Windows XP VPN software is worthwhile, or if it's just pretend security
> that uses triple-ROT13.
>
> Thank you in advance.
>
This explains a bit
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/DepKit/3ef29f05-2890-47a7-98b2-9ee48df8a0e9.mspx
simon

Posted by dude on February 21, 2006, 4:12 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
If I may ask a question of you please......

I am trying to setup a VPN between my home and office PC.
Windows XP explains how to setup this PC to connect for the outbound
connection, but doesn't say much of anything about what to setup on my
remote PC at the office to receive and accept my connection!

I have setup the VPN connection here, entered the IP address of the office
PC and used my Windows logo ID and password... yet I am unable to connect.
It is rejected as soon as I click connect.

Can you help and/or Is there any sites that explain all the steps in
detail for setting up both ends!

much thanks
Jane




> I'm very new to VPNs (ie, less than 48 hours) and I just set up a
> simple VPN between two XP computers, and was surprised how easy it was.
>
> On my end, I have an XP Home laptop running the built-in VPN server -
> it shows up in Network Connections under "Incoming" and is set to:
> - allow callers to access my local area network
> - specifiy TCP/IP addresses from 10.0.0.1 through 10.0.0.10
> - allow calling computer to specify its own IP address
>
> On the other end is an XP Professional laptop that is set up as a
> client - it shows up in Network Connections under "Virtual Private
> Network" and calls itself a WAN Miniport (PPTP) device.
>
> When the client connects, it logs in without complaint, gets the
> address of 10.0.0.4 and is able to communicate with the server at
> 10.0.0.1. I'm assuming this is all done over the encrypted tunnel
> between the two systems.
>
>
> I have these questions:
>
> Regarding the client setup, under the "security" tab of the properties
> dialog, under the "Advanced (custom settings)" area, there are a few
> options. What is the difference between these two options under data
> encryption?
> - require encryption (disconnect if server declines)
> - Maximum strength encryption (disconnect if server declines)
> I'm looking for bits, algorithm, differences in key exchange, etc. I'm
> no crypto expert but I did read Applied Cryptography while staying at a
> Holiday Inn Express once, so I'm not completely clueless.
>
>
> Are XP's VPN client/server believed to be reasonably secure, or are
> they like so many other Windows products in that there are constant
> streams of bugs, endless vulnerabilities, poor implementations of good
> ideas, etc that hinder security?
>
>
> I'm not going to send nuclear bomb plans over this connection (I have
> carrier pigeons for that) but I'd like to know whether or not the
> Windows XP VPN software is worthwhile, or if it's just pretend security
> that uses triple-ROT13.
>
> Thank you in advance.
>



Similar ThreadsPosted
Need a router w. VPN which support the XP builtin VPN client December 8, 2006, 4:58 am
pptp secure? March 16, 2005, 7:50 am
Offshore Secure VPN Locations July 7, 2008, 12:55 am
why is vpn slow when establishing secure connection? August 16, 2005, 2:50 pm
VPN 3000 , Domain Controller, Cisco Secure ACS December 21, 2006, 12:41 am
Secure VPN Gateway - Windows and Linux Clients January 2, 2007, 7:41 pm
Your advice re secure access to remote datacenter August 25, 2008, 3:36 am
How To Build Secure and Reliable Carrier-Grade Network Equipment -May 24, 1pm ET May 3, 2005, 2:25 pm

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map