Re: [VPN] Application timeouts over VPN...HELP!

[Alex Pankratov <[EMAIL PROTECTED]>]

Ryan Malayter wrote:
> From: Alex Pankratov [mailto:[EMAIL PROTECTED] 
>
> > can you explain why *exactly* it's 
> > a "bad security" ? Especially given 
> > that the TCP connection in question 
> > is IPsec'ed in first place.
>
> If the tunnel is left open, and the engineer's workstation is online and
> idle, the workstation becomes a vector for compromising the security of
> the encrypted traffic.

That's not what I asked about. The question was how keeping *TCP
sessions* open reduces overall VPN security. Let me rephrase it -
which attacks mountable against VPNs would have a lesser chances of
succeeding if all TCP connections are short-lived ?

> [bunch of unrelated to TCP question stuff snipped]

_______________________________________________
VPN mailing list
[EMAIL PROTECTED]
http://lists.shmoo.com/mailman/listinfo/vpn