cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Champion

Re: Murky VPN : Partially open for secure communication...?

> iluom (Contributor I) posted a new reply in Tech Talk on 04-06-2019 05:43 AM in the (ISC)² Community :

> I have a VPN subscription from a provider. I got my VPN client
> installed on my personal device.

OK, first off, this is from your provider, so you'll have to check details with them.
However, I strongly suspect that this only creates a VPN connection to your
provider. (Hopefully encrypted, but, again, you'd better check with them.)
Generally this is so you can use public wifi access points and have a connection to
your provider that (should be?) encrypted so that local users (at the public wifi
point) can't see your traffic. I very much doubt that it does anything from your
provider outbound to anything, but you could ask if a specific connection can be
made to your (I presume) own server.

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
Everyone is a genius at least once a year. The real geniuses
simply have their bright ideas closer together.
- Georg Christoph Lichtenberg
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

............
This message may or may not be governed by the terms of
http://www.noticebored.com/html/cisspforumfaq.html#Friday or
https://blogs.securiteam.com/index.php/archives/1468
Newcomer II

Re: Murky VPN : Partially open for secure communication...?

Have you considered building an IPSec tunnel directly from A to C and managing the Security of RDP with the organization hosting the computer you want to access remotely?

Brigitte.
MBA, CISM, CISSP, GCIH ,CCNP, ITIL
Highlighted
Community Champion

Re: Murky VPN : Partially open for secure communication...?

@AfoumbomGood points, from experience, by default RDP uses TLS V1.0 or V1.1, you have to do some re-configuration to ensure it conforms to TLS V1.2.  

 

Regards

 

Caute_cautim