On Thu, 2005-10-27 at 09:28 -0500, Mike McGrath wrote: : > > Leonard Isham, CISSP > > Ostendo non ostento. > > > > Not trying to doubt your word, but can you point me towards > > articles to prove the built in VPN to be less than desirable? > > > > I have to be able to prove my case to my users that the > > installation of "another" client is required...... > > > > Thanks. > What your interested in is poptop. Their website has a better > description as to why not to use it: If you are only dealing with XP (no Win2K or earlier) then you don't need PopTop. Windows XP supports IPSec NAT-T natively for its VPN, you don't need PPTP/L2TP. > http://poptop.sourceforge.net/dox/protocol-security.phtml If you've got an installed based of PPTP, then you got what you got and you gotta deal. But if you don't already have an installed base of PPTP then I would avoid that sucker like the plague. XP doesn't need PPTP and I even think IPSec is available for Win2K (just not natively supported OOB). > -Mike Mike -- Michael H. Warfield | (770) 985-6132 | mhw@xxxxxxxxxxxx /\/\|=mhw=|\/\/ | (678) 463-0932 | http://www.wittsend.com/mhw/ NIC whois: MHW9 | An optimist believes we live in the best of all PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it!
Attachment:
signature.asc
Description: This is a digitally signed message part
