Re: [PCTECH] VPN questions

["Adam Lang" <aalang@xxxxxxxxxxxxxxxxxxxx>]

That isn't true.  By default, Windows desktops are not setup to handle
routing between two networks they are on.  You have to explicitly tell
Windows XP, etc, to act as a router.

Plus, the VPN security shouldn't allow the data to travel because the source
network (what the attacker is on) shuold be implicitly blocked by the ACL
list.  Only data originating from the VPN interface should be allowed
through.

----- Original Message ----- 
From: "Scott Johnson" <sjohnson@xxxxxxxxxxxxxxxxxxxx>
To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
Sent: Wednesday, August 04, 2004 4:39 PM
Subject: Re: [PCTECH] VPN questions


>
> Route 1: Work stuff thru VPN.
> Route 2: Play stuff directly to home connection.
>
> If you make changes so that this works, you are opening a security hole to
your
> company.  Basically anybody who can get to your pc thru route 2 can then
access
> your company thru the route 1.  This is why most if not all network admins
will
> set it up so that once you start the VPN, you can't access route 2.  If
you
> truly have a business need to access the Internet while using the VPN,
have the
> admin change it so that you can surf thru the VPN.  This is the most
secure way
> as far as the company is concerned.  Except for those cases when you have
a
> virus on your home computer and you start up that VPN connection...;-)
>
> -- Scott J.