RE: [VPN] SSL VPN

["Chris Gripp" <[EMAIL PROTECTED]>]

I'd say remote control accessible from the internet without source IP filtering is generally a bad idea regardless of the implementation.  Anyone could just sit and bang away at a login prompt.  Now, hopefully you are using strong password policies, etc to mitigate the risk but it still doesn't give me a warm and fuzzy feeling knowing anyone could just keep trying till they get bored or succeed.

-Chris

-----Original Message-----
From: Roger Qian [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 30, 2003 8:37 AM
To: shannong
Cc: [EMAIL PROTECTED]
Subject: RE: [VPN] SSL VPN


How is pcANYWHERE? smae as GoToMyPc from a security stand point?

Thanks,
Roger

-----Original Message-----
From: shannong [mailto:[EMAIL PROTECTED]
Sent: Tuesday, April 29, 2003 7:27 PM
Cc: [EMAIL PROTECTED]
Subject: RE: [VPN] SSL VPN


>From a security stand point, GoToMyPC is a really bad idea.  Providing a
third-party with unadulterated access to machines on your internal
network is not taking your internal security very serious.  In addition
to giving that provider with access, when they get hacked this
perpetrator will have access to your PCs as well.  GoToMyPC has HIPAA
and GLBA issues which make it a legal issue in healthcare and finance,
respectively.




-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of safieradam
Sent: Tuesday, April 29, 2003 4:03 AM
To: Tina Bird; Bartsch, Vincent
Cc: [EMAIL PROTECTED]
Subject: Re: [VPN] SSL VPN

Check out www.GoToMyPC.com.  There are several similar products but this
one
is advertising heavily where I tend to go.

Adam

----- Original Message ----- 
From: "Tina Bird" <[EMAIL PROTECTED]>
To: "Bartsch, Vincent" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, April 28, 2003 10:36 PM
Subject: Re: [VPN] SSL VPN


> On Mon, 28 Apr 2003, Bartsch, Vincent wrote:
>
> > I am researching everything about SSL and it's use as a VPN
solution. I
am
> > aware of some of
> > it's limitations but I was wondering has anyone tried this: allowed
a
SSL
> > connection to a web
> > server that lets the user to open a connection to a terminal server.
Or
can
> > it be configured to
> > connect to a terminal server via a SSL connection directly? Has
anyone
tried
> > this, were they
> > successful?
>
> Hi Vincent -- I don't have anything that will be immediately useful,
but
> We had a bit of a discussion about SSL-based VPNs.  The responses to
my
> original posting included a lot of experience the writer's had had, so
it
> might be very useful for you.
>
> http://vpn.shmoo.com -- click on SSL VPNs & Other Misc
>
> cheers -- tbird
>
> -- 
> It's not the size of the key, it's the implementation of the
algorithm...
>
>                                        -- Natasha Smith
>
> http://www.shmoo.com/~tbird
> Log Analysis http://www.loganalysis.org
> VPN http://vpn.shmoo.com
> Security Alerts http://securecomputing.stanford.edu/alert.html
>
> _______________________________________________
> VPN mailing list
> [EMAIL PROTECTED]
> http://lists.shmoo.com/mailman/listinfo/vpn
>
_______________________________________________
VPN mailing list
[EMAIL PROTECTED]
http://lists.shmoo.com/mailman/listinfo/vpn



_______________________________________________
VPN mailing list
[EMAIL PROTECTED]
http://lists.shmoo.com/mailman/listinfo/vpn
_______________________________________________
VPN mailing list
[EMAIL PROTECTED]
http://lists.shmoo.com/mailman/listinfo/vpn
_______________________________________________
VPN mailing list
[EMAIL PROTECTED]
http://lists.shmoo.com/mailman/listinfo/vpn