VPN for secure access ...

[Jean-Luc.Adam at swisscom.com]

Correct. 

We agree that IPSec is a secure way of transmitting data. But (And) once one
has set it up, there is no real need to add another protocol on top of it
(unless one doesn't want to change the application config. ?).

Question: are there several version of IPSec, or can we say that one router
which supports it will act the same as any other router running the stack ?
(i.e. Do we need to care about some 'IPSec' feature which may not run
everywhere ? - today or in the future)

Jean-Luc


> Right. This is Microsoft's implementation.
> 
> PPTP does not specify any of this itself as you can verify in 
> RFC 2637.
> PPTP relies on some other method for providing security. 
> Microsoft just
> didn't do a good job. IPSec is another way of providing PPTP 
> security, and
> when they are used in conjunction in the manner I have described, PPTP
> becomes as secure as IPSec. Then it can be used for passing 
> anything you
> would be willing to pass with IPSec alone.
> 
> Jason

****************************************************************
TO POST A MESSAGE on this list, send it to vpn at listserv.secnetgroup.com

The VPN FAQ (under construction) is available at
http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html

We are currently experiencing "unsubscribe" difficulties.  If you
wish to unsubscribe, please send a message containing the single line
"unsubscribe vpn your-e-mail-address" to owner-vpn at listserv.secnetgroup.com

****************************************************************