1. Home
  2. Networking
  3. Network security assessment

Chapter 11. Assessing IP VPN Services

This chapter tackles assessment of services found running on network boundaries that provide secure remote access over IP. Increasingly, VPN services provide access for both home users and branch offices, using IPsec, proprietary Check Point FWZ, or Microsoft PPTP. These services are under threat primarily from offline preshared key-grinding and information-leak attack, which are described in the following sections.



    		Network Security Assessment
    		Foreword
    		Preface
    		Chapter 1. Network Security Assessment
    		Chapter 2. The Tools Required
    		Chapter 3. Internet Host and Network Enumeration
    		Chapter 4. IP Network Scanning
    		Chapter 5. Assessing Remote Information Services
    		Chapter 6. Assessing Web Services
    		Chapter 7. Assessing Remote Maintenance Services
    		Chapter 8. Assessing FTP and Database Services
    		Chapter 9. Assessing Windows Networking Services
    		Chapter 10. Assessing Email Services
    		Chapter 11. Assessing IP VPN Services
    		11.1 IPsec VPNs
    		11.2 Attacking IPsec VPNs
    		11.3 Check Point VPN Security Issues
    		11.4 Microsoft PPTP
    		11.5 VPN Services Countermeasures
    		Chapter 12. Assessing Unix RPC Services
    		Chapter 13. Application-Level Risks
    		Chapter 14. Example Assessment Methodology
    		Appendix A. TCP, UDP Ports, and ICMP Message Types
    		Appendix B. Sources of Vulnerability Information
    		Colophon