Great Circle Associates Firewalls
(August 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: VPNs and PPTP
From: mje @ intersec . com (Mike Endrizzi)
Date: Sat, 30 Aug 1997 21:06:41 -0500
To: <firewalls @ greatcircle . com>


> way to go before they become mainstream.. When evaluating these products,
> look for standards compliance (ISAKMP/OAKLEY, SKIP IPSEC, DES,  RSA,
etc.)

OSI and Ada are standards too.

PPTP may not be the greatest technical, security and performance solution
but:

1) free
2) integrates cleanly into MS environments (95% of the desktop, probably
99% of road warriors)
3) free
4) no extra hardware
5) free
6) transports IPX and native NETBEUI (broadcasts over the Internet, scary)
6) free
7) lower administrative costs (no key mgt, uses existing user database, no
extra hardware,
    uses existing NT RAS administrative model)
8) did I say free?


Oh yes it has negatives like:

1) weak authentication
2) slower
3) bitch to install and figure out routing
4) GRE doesn't pass through all firewalls
5) precious little debug information

But oh well. 

PPTP: Yet another Microsoft standard that sends IPSEC, etc.... back
           to the ivory towers.


dreez



Indexed By Date Previous: RE: Remote Firewall Penetration Testing
From: Russ <Russ . Cooper @ rc . on . ca>
Next: Re: credit card fraud
From: security <root @ Blue . HeatherGreens . net>
Indexed By Thread Previous: VPNs and PPTP
From: "Carlos Eduardo Miranda Zottman" <24279 @ hades01 . stj . gov . br>
Next: Re: radius for NT
From: "Umit TIRIC" <umittiric @ bdp . com . tr>

Google
 
Search Internet Search www.greatcircle.com