Please enable JavaScript.

Coggle requires JavaScript to display documents.

ITCS: Network Security (VPN (Security risks of VPN (Security of…

- - - - looks at addressing protocol information i packet header
        
        IP
        
        TCP/UDP
        
        compares to administrator defined rules
    - - Stateful multilayer firewall
- - - - VPNs is answer
  - - - authentication
      - route traffic to corporate network
  - - - hashes
      - digital signatures
      - message authentication codes (MACs)
        
        appended to messages and act as authenticator
        
        similar to digital signatures but hash is encrypted and decrypted using the same secret key (symmetric encryption)
        
        dont provide non-repudiation whilst digital signatures do
        
        ie MACs do not confirm that the source is the identified the source is and they cannot deny that they sent that
  - - - designed by microsoft led consortium
      - unsuited to large companies
      - limited to 255 connections per server
      - does not settle on single form of authentication
        
        two diffrent PPTP servers could be incompatible
    - - adaptation of a VPN protocol originatal known as L2F
      - Cisco and IETF created this
      - combines features of both PPTP and L2F
    - - developed by IETF
      - most widely supported protocol
        
        Intel
        
        IBM
        
        HP
      - built on encryption techniques which had been "tried and test"
  - - - competing standards
- - - - usually blocks source IP address