> We all know that VPN does nothing more then encrypt Data. > We need to make sure that the data being transfered to our > interal networks is actually Good Data. It is also very important to identify all points where encrypted data is being decrypted and how it is transmitted later. I've seen dozens of very expensive VPN installations where architecture design was flawed and encrypted data was also transmitted in open form. Running snort in sniffer mode (or any other sniffer) can be very helpful to discover such things. Also check for vulnerabilities specific for your VPN platform. Regards, Alex Czarnowski AVET INS
---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/
