Recommendations for VPN end point appliances?

Travis Roy travis at scootz.net
Wed Jun 16 11:20:02 EDT 2004


>   The thing that really worries me is: A VPN box that is doing things
> incorrectly will appear to work just like a VPN box that is doing things
> correctly.  Unless you actually try and crack it, you'll never know that it,
> say, is using the same session key over and over again.  I would have to say
> that I would not trust LinkSys to get a protocol suite as complex as IPsec
> right.  It may be that all you're getting is a false sense of security.

This is very true, I had a friend that used a linksys VPN box. Good 
thing he does very strict security audits once a month. Sniffing the VPN 
packets resulted in him findind out that even with the linksys box 
saying that the VPN link was secure, it was not encrypted at ALL.



More information about the gnhlug-discuss mailing list