I'm new to SonicWALL. How secure is the SonicWALL Net Extender? It seems to be using PTPP, but calls it SSL VPN, are they different. Am I secure? If its bad, whats better?



NetExtender operates over SSL. It does not use pptp or l2tp although the SonicWALL may also have the capability of becoming an endpoint for l2tp. That is separate from NetExtender afaict.

| improve this answer | |
  • It seems you don't know what it uses, per your comment, perfect chance to research what it does use then edit that into your answer. – Ramhound Feb 8 '16 at 22:00
  • When I said "I don't think" I meant "I know it doesn't". Pardon me for being wishy-washy. But some of us are not Sith lords and so do not speak in absolutes. – Miles Lott Jul 12 '17 at 12:47
  • If you know it does not, then say you know it does not, "I don't think it uses" indicates you don't know one way or another. – Ramhound Jul 12 '17 at 13:11
  • Clearly you are inordinately invested in this answer. – Miles Lott Jul 12 '17 at 14:54

Am I secure? If its bad, whats better?

Microsoft's PPTP is unconditionally insecure. Use an IPSec or IKEv2 VPN with client certificates for the best security posture. Also, use something like ike-scan to verify portions of the configuration.

I also question some of the closed source firewall solutions because they do things like hard-coding passwords for [backdoor] access. See, for example, Barracuda Firewall Rigged With Hard-Coded Backdoor. I use a m0n0wall because it built upon the BSDs and it supports IPSec VPNs. Note: this is not an indictment of Sonicwall.

Also see, for example, PPTP vs L2TP vs OpenVPN vs SSTP vs IKEv2

| improve this answer | |
  • Is the net-extender definitely pptp? – wlraider70 Jun 29 '15 at 2:03
  • @wlraider70 - I have no idea; I don't use it. I was commenting on the use of PPTP. – jww Jun 29 '15 at 2:17
  • It's definitely not. – Miles Lott Jul 12 '16 at 16:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.