A good place to look for current info would be the archives at:

ntbugtraq.ntadvice.com

and

ntsecurity.ntadvice.com

I have seen numerous threads debating the security of PPTP in both of
these groups.

If I were going to implement PPTP, I would definately make sure it was
patched to the latest rev.  counterpane.com did a review of the problems
with PPTP and then L0pht Heavy Industries came out with a sniffer that
could monitor PPTP connections.

All of these vulnerabilities are supposed have been addressed, but I think
most people are gun-shy now.  What will the next major hole in it be??

Carric Dooley
COM2:Interactive Media
http://www.com2usa.com

On Wed, 7 Apr 1999, White, Tom wrote:

> Our handy network folks have decided to use Microsoft PPTP as part of our
> VPN solution.  This solution is Bay Networks based (to go along with the
> rest of our architecture).  My concern is that I have noticed several
> derogatory comments about the Microsoft implementation of PPTP.  I don't
> know if these comments are just the normal MS bashing (deserved in most
> cases) or whether there are real problems with their implementation.  So, I
> would appreciate any information this list could provide.
> 
> thanks.
> 
> tom white
> 
> ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
> Thomas H. White                        It is morning in Africa.
> Systems & Database Programmer          As the sun rises on the plain the
> gazelle
> NYS HSASC                              awakens knowing if it cannot outrun
> the fastest
> Bureau of Security Administration      lion it will die.
> [EMAIL PROTECTED]                 It is morning in Africa.
> (518) 473-8268                         The lion awakens, knowing if it can't
> outrun
>                                        the slowest gazelle, the lion and
> it's family
>                                        will die.
>                                        It is morning in Africa
>                                        and you had better be running.
> ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
> 

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to