I'm new to SonicWALL. How secure is the SonicWALL Net Extender? It seems to be using PTPP, but calls it SSL VPN, are they different. Am I secure? If its bad, whats better?
Super User is a question and answer site for computer enthusiasts and power users. It only takes a minute to sign up.Sign up to join this community
Am I secure? If its bad, whats better?
Microsoft's PPTP is unconditionally insecure. Use an IPSec or IKEv2 VPN with client certificates for the best security posture. Also, use something like ike-scan to verify portions of the configuration.
I also question some of the closed source firewall solutions because they do things like hard-coding passwords for [backdoor] access. See, for example, Barracuda Firewall Rigged With Hard-Coded Backdoor. I use a m0n0wall because it built upon the BSDs and it supports IPSec VPNs. Note: this is not an indictment of Sonicwall.
Also see, for example, PPTP vs L2TP vs OpenVPN vs SSTP vs IKEv2