Security Basics mailing list archives

Wireless security question..


From: Brian Loe <knobdy () gmail com>
Date: Mon, 31 Oct 2005 11:33:50 -0600

Is the VPN connection from the router to your Firewall/VPN
Concentrator/Router or from the laptop to you? If from the laptop, the same
that was true for controlling the machine after hacking the router is true.
If the router is providing the VPN, however, then the intruder is on your
VPN - and has all of the connection settings to create that tunnel
elsewhere.

3- If the laptop's wireless router is secured with WEP and
connected to the office via VPN can it be EASILY hacked
into? The VPN connection gives them little access to the
network, barely what they need to work. Will the intruder
have access to our network?
Assuming the intruder gained access to the wireless router (and an IP
address was issued to the intruder, etc), the intruder would then need to
gain access to the VPN. I don't think that would be nearly as easy as it
would be to crack WEP (in lieu of WEP, it is recommended that people use
WPA-PSK if both your router and wirelss NIC cards support it).



------=_Part_28715_5355696.1130779783023
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

<br><br>---------- Forwarded message ----------<br><span class=3D"gmail_quo=
te">From: <b class=3D"gmail_sendername">Brian Loe</b> &lt;<a href=3D"mailto=
:knobdy () gmail com">knobdy () gmail com</a>&gt;<br>Date: Oct 31, 2005 11:28 AM<=
br>
Subject: Re: Wireless security question...<br>To: &quot;<a href=3D"mailto:g=
roffg () yahoo com">groffg () yahoo com</a>&quot; &lt;<a href=3D"mailto:groffg@ya=
hoo.com">groffg () yahoo com</a>&gt;<br><br></span><div><div><br>
Is the VPN connection from the router to your Firewall/VPN
Concentrator/Router or from the laptop to you? If from the laptop, the
same that was true for controlling the machine after hacking the router
is true. If the router is providing the VPN, however, then the intruder
is on your VPN - and has all of the connection settings to create that
tunnel elsewhere.<br>
</div><span class=3D"q"><br><blockquote class=3D"gmail_quote" style=3D"bord=
er-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-l=
eft: 1ex;">3- If the laptop's wireless router is secured with WEP and<br>co=
nnected to the office via VPN can it be EASILY hacked
<br>into? The VPN connection gives them little access to the<br>network, ba=
rely what they need to work. Will the intruder<br>have access to our networ=
k?<br>&gt;&gt;
Assuming the intruder gained access to the wireless router (and an IP
address was issued to the intruder, etc), the intruder would then need
to gain access to the VPN. I don't think that would be nearly as easy
as it would be to crack WEP (in lieu of WEP, it is recommended that
people use WPA-PSK if both your router and wirelss NIC cards support
it).<br><br></blockquote></span></div><br>

------=_Part_28715_5355696.1130779783023--


Current thread: