Microsoft's PPTP is the most insecure VPN protocol ever conceived. However, it is the easiest to setup as compared with IPSec. For large deployments, issuing certificates for all users is an administrative nightmare more so with providing support on how to configure their computers to connect via IPSec.
PPTP is the most commonly supported across platform (even PDAs) and the simplest to deploy. :-) --o000o-- Prof. Rommel Palma Feria, MSc, MIEEE, MACM Director, University Computer Center University of the Philippines - Diliman Quezon City 1101 Philippines Voice: +63 2 9268837 Fax: +63 2 9204803 ----------------------------------------- Original Message: From: [EMAIL PROTECTED] To: Philippine Linux Users Group Mailing List <[EMAIL PROTECTED]> Sent: Mon Mar 01 20:49:27 EST 2004 Subject: Re: [plug] win2K/winXP connecting to freeswan vpn On Mon, Mar 01, 2004 at 09:27:10AM +0100, Glynn S. Condez wrote: > You might reading this guide for setting up FreeS/WAN road warriors . > http://www.natecarlson.com/linux/ipsec-x509.php. If you want a simple VPN > implementation you can try poptop(www.poptop.org) and for LAN-LAN > openvpn(http://openvpn.sourceforge.net/) might work as well. However, in order to use Poptop with Microsoft's VPN client you'll need to be using the embarrasingly insecure Microsoft PPTP implementation. Bruce Schneier and Mudge of L0pht discovered some very serious security flaws in the Microsoft implementation that everyone thinking of actually deploying MS-PPTP must consider. See here for the details: http://www.schneier.com/pptp-faq.html http://www.schneier.com/pptp.html Basically, they found that MS-PPTP is worthless as a VPN, and they advise strongly that people stick to IPsec if they want a VPN that has a chance of being secure. -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph ... To leave, go to http://lists.q-linux.com/mailman/listinfo/plug ... Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie ----------------------------------------------------------------------- DeskNow - The next generation web groupware http://www.desknow.com -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
