| VID |
13014 |
| Severity |
20 |
| Port |
500 |
| Protocol |
UDP |
| Class |
VPN |
| Detailed Description |
A VPN service appears to be enabled. A Virtual Private Network (VPN) server allows an authenticated user to securely pass through the firewall and access internal network resources. The VPN component also encrypts the data between the user and the VPN server, securing the connection to a private network. VPN servers provide several different technologies for securing your data stream: tunneling, encryption, identification and encapsulation. |
| Recommendation |
The VPN should be controlled by an administrator under your security policy. Ensure that the VPN service is secured with a strong authentication and that uses a strong encryption protocol for VPN sessions, such as IPSEC. |
| Related URL |
(CVE) |
| Related URL |
(SecurityFocus) |
| Related URL |
(ISS) |
|
