<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>I am going to get a hardware device for this purpose. I don't want to end up having to support all of the user administration. <br><br>What would be the best low cost hardware VPN for connecting windows clients? I am not sure If I want to use Cisco, and their VPN client. I was hoping I could find one that can use native windows tools to set up the VPN instead of some proprietary client software.<br><br>My higher-ups don't want DDWRT, or PF sense.<br><br><div>> Date: Mon, 5 May 2014 19:33:04 -0400<br>> From: unsolicited@swiz.ca<br>> To: kwlug-disc@kwlug.org<br>> Subject: Re: [kwlug-disc] Easy Software based VPN<br>> <br>> Less reliable? Either she works and you have connectivity, or you don't. <br>> Whether client interfaces are user friendly, or encryption is <br>> sufficient, is a different story. As is easy of setup, if any. Most of <br>> the time, for most of the people, any encryption is more than <br>> sufficient. (Anyone so interested probably can't break in any time frame <br>> that matters.)<br>> <br>> Let's remember that OpenVPN is a different beastie than IPSec, the <br>> international standard. OpenVPN is more than sufficient most of the <br>> time, but I understand there is a point at which it doesn't scale very <br>> well. i.e. There is a tipping point where the simplicity of setup of <br>> OpenVPN doesn't scale as well/simply, while IPSec is apparently <br>> irritatingly complex to set up - but once implemented scales almost <br>> endlessly, easily.<br>> <br>> And there's a cost tradeoff in that too. OpenVPN, cheap or free, IPSec <br>> non-trivial cost. In either case, most of the cost is in the admin time <br>> to set up / maintain, not the fees charged. (Per user basis.) And with <br>> developer fees/costs you get a more refined / user friendly client end. <br>> (e.g. As I understand it, the proprietary Cisco VPN solution.)<br>> <br>> In the end, likely any encryption, even PPTP, will more than suffice. If <br>> encryption is even needed. (And even that is less often than commonly <br>> thought.)<br>> <br>> https://www.ivpn.net/pptp-vs-l2tp-vs-openvpn<br>> <br>> "Due to the major security flaws, there is no good reason to choose PPTP <br>> other than device compatibility" - not quite true. PPTP being faster / <br>> having lower overhead. But there's a premise here: Is there any real <br>> value in your data that people will want to expend time and resources on <br>> deciphering? Probably not, particularly when it is only the pipes, not <br>> 3rd parties, whom even have access to the data stream. Most of the time, <br>> the value of encryption is merely and only that it's not going across <br>> the wire clear text. Beyond that, is there anything in your data people <br>> are willing to spend $ on to discover - well, no encryption will be <br>> sufficient for the truly determined. PPTP is probably more than <br>> sufficient - but if OpenVPN is as easy to set up and with just as little <br>> overhead / CPU requirements, may as well use it. Which to use has less <br>> to do with encryption strength / security flaws than just about every <br>> other aspect beyond that.<br>> <br>> http://networkengineering.stackexchange.com/questions/1067/what-are-the-downsides-of-openvpn<br>> <br>> http://www.enterprisenetworkingplanet.com/netsecur/article.php/3844861/OpenVPN-Is-Too-Slow-Time-to-Consider-IPSEC.htm<br>> <br>> <br>> On 14-05-05 02:43 PM, CrankyOldBugger wrote:<br>> > PPTP is an older, less reliable tech. Use L2TP or, even better, openVPN.<br>> > If you go with openVPN (as many people do), be sure to steer clear of the<br>> > versions affected by Heartbleed!<br>> ><br>> > There's a comparison of some different types at<br>> > http://www.giganews.com/vyprvpn/compare-vpn-protocols.html<br>> <br>> <br>> _______________________________________________<br>> kwlug-disc mailing list<br>> kwlug-disc@kwlug.org<br>> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org<br></div> </div></body>
</html>