VPN appliances (was Re:Looking for someone with Cisco PIX experience)

[Ansar Mohammed]

> As I understand it, Microsoft's implementation of PPTP is faulty, not
> PPTP in general.
> 
Naw. Its RC4 that most people complain about. (the same cipher in WEP :P).
Microsoft and Cisco jointly created PPTP. 

PPTP on NT4 had lots of issues. So did PPTP on IOS. There hasn't been one
for quite some time on either platform but the bad rep remains. 

The link most people reference when talking about PPTP is this page:
http://poptop.sourceforge.net/dox/protocol-security.phtml

Of which the information is rather dated. 

The typical complaint was the use of MS-CHAP and MS-CHAPv2. EAP and EAP-TLS
have been available for years now with multifactor authentication.

--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists