Security in VPNs

[jagat]

Hey

We are designing a solution based on Internet VPN, but are worried about security issues on connecting thru the internet.

We have looked at things like tunnelling, having a hardware based security solutions or may be software based like checkpoint or watchguard

Please Advice

[a-vazquez]

You should take a look at the VPN primer at http://www.cisco.com/warp/public/cc/so/neso/vpn/vpne/vpn21_rg.htm for a good foundation in vpn tunnels accross the Internet. Cisco has some great software and hardware solutions that you can check out at http://www.cisco.com/public/vpn.html. For the most secure tunnels, use 3DES encryption. It is the same used by major banks and corporations to encrypt sensitive data.

[felrodian]

You should take a look at the VPNet VPN Security advisory from last December at http://www.fatelabs.com/f8-120500-vpnet.txt for a nice scare on implementing a VPN in your network. This problem does not appear to be vendor specific after all. My advice to you: don't put all your eggs in one basket. Do NOT make the mistake of putting your whole network security in the hands of some vendor's VPN device who is just trying to make a profit. VPN Encryption seems strong enough, but be careful with VPN tunneling. Be careful, and watch www.securityfocus.com's Bugtraq, we should be releasing something big soon. Good luck.

felrodian@fatelabs.com

www.fatelabs.com