The users' PC is the most vulnerable point in the equation, in any VPN
scenario. Its that much more vulnerable because its on a wireless network.

The best thing to do is run a personal firewall on the machine, or use a VPN
client (like the Cisco one) that has a VPN client built in.

------------------------------------------------------
Roger D. Seielstad - MCSE
Sr. Systems Administrator
Inovis - Formerly Harbinger and Extricity
Atlanta, GA


> -----Original Message-----
> From: Martin Blackstone [mailto:[EMAIL PROTECTED]] 
> Sent: Tuesday, December 17, 2002 9:15 AM
> To: NT 2000 Discussions
> Subject: RE: 802.11b and VPN security
> 
> 
> Good question. I'm not sure. Since the tunnel is from the PC 
> to the Network,
> I imagine a person would need to gain control of the PC. 
> Otherwise, they are
> just on the local WAP network.
> At the very least, this user should be running WEP enabled. 
> At least that
> would keep the most basic losers out.
> 
> -----Original Message-----
> From: Lum, David [mailto:[EMAIL PROTECTED]] 
> Sent: Tuesday, December 17, 2002 6:13 AM
> To: NT 2000 Discussions
> Subject: 802.11b and VPN security
> 
> 
> Scenario:
> 
> A home user has DSL and wireless LAN, and this user uses the 
> Internet to VPN
> into work. Is the security hole primarily between the WAP and 
> the user, or
> could a hacker piggyback into the VPN connection as well? 
> Have any of you
> ran into this scenario yet?
> 
> If someone has links to more detail on this it would also be 
> appreciated.
> 
> Dave Lum - [EMAIL PROTECTED]
> Sr. Network Specialist - Textron Financial
> 503-675-5510
> 
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to %%email.unsub%%
> 
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to %%email.unsub%%
> 

------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to