Are VPN Clients susceptible to hackers when connected?

ddisalvo · ‎11-15-2002

Are VPN clients tunneled into a 3030 susceptible to hacking? does establishing the tunnel protect the client in anyway?

What is the level of risk? if we prevented split tunneling.

edadios · ‎11-17-2002

The new vpn client has also built in firewall, which you can enable to prevent hackers into it even if you do split tunneling. More details here : http://www.cisco.com/univercd/cc/td/doc/product/vpn/client/rel3_5_1/351_3kcl.htm#xtocid9.

Regards,

ddisalvo · ‎11-18-2002

Great thanks.

jeff_caprock · ‎11-18-2002

I'm gonna step in and say that this fw is still not enough. We're using v3.6.1 and still see hack attempts. Our clients connect to Earthlink as our provider, then activate the vpn to get to our corporate network. Each client laptop also runs Symantec Personal Firewall, and we routinely see hack attempts coming from the Internet.

Basically, the vpn client knows when requests are destined for the intranet, and those destined for the Internet, which is _not_ encrypted, of course. As such, Internet traffic is still vunerable, and our personal fw logs are backing this up as well.

-Jeff