 DanielPremium,MVM
join:2000-06-26
San Francisco, CA
1 edit | reply to alamarco
Re: VPN vs SSH Remember that the encryption of a connection isn't the only security consideration. You also need to think about how you are authenticating. So imagine that your company allows remote access from the Internet with 256-bit AES. That's good, right? Well, maybe not if you can create one of these tunnels into your network using a simple username and password. Consider two-factor authentication or a *very* strong security policy if passwords are used.
Basically, if it's easy to gain access to your remote access avenue then it doesn't really matter how secure it is once it's set up. Always remember to use as strong of an authentication system as possible in addition to using strong encryption.
Cheers,
-Daniel
--
dmiessler.com -- grep understanding knowledge |
