Welcome to ISAserver.org

Site to Site VPN authentication method

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> Site to Site VPN authentication method

Page: [1]

Message

<< Older Topic Newer Topic >>

Site to Site VPN authentication method - 26.Feb.2004 1:45:00 PM

Guest

I remember reading someowhere that IPSEC authentication with pre-share keys passed the pre-shared key unencrypted, is this the case when used between 2 ISA 2004 servers for a site to site VPN?

If so would it be better to use PPTP between the sites until i get certificates organised? As assuming i set it to use MS-CHAP2 it should be fairly secure?

Post #: 1

Featured Links*

RE: Site to Site VPN authentication method - 27.Feb.2004 12:54:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi A,

I don't believe that's true, but the key is stored on the machine in plain text and there are a number hacks aimed against it. PPTP and L2TP/IPSec are both more secure and you should use those protocols if you can.

HTH,
Tom

(in reply to Guest)