I am going to need to deploy a VPN service on a machine. There is no big need for security and overall I am thinking of using PPTP as it supports most systems and is easy to setup. However, many sites recommend OpenVPN. What’s your choice?
EDIT: thanks everyone for the replies! I will use OpenVPN both for the security issues with PPTP, speed/security ratio and the fact that it works under 1 port, 1 protocol, not like PPTP or IPSec…
Pptp in many implementations has security issues, fairly big ones. You’d only use it if you didn’t have time or skill to implement IPSec/L2TP and if you wanted a vpn that used the built in client in most OSs rather than downloading a client tool. If you’re happy with a client tool (and it’s real easy these days), I’d use openvpn in a flash.
from wikipedia: “PPTP is considered cryptographically broken and its use is no longer recommended by Microsoft.”
i’m not saying you shouldn’t use pptp. but what will your answer be when “some dude from the office” asks you why you chose an insecure, outdated, non-recommended solution for your client?
I wish OpenVPN was supported by iOS. I have dd-wrt on my router and setup a pptp VPN. I use it rarely because I know it’s not secure. I also don’t have a machine at home that’s always on so setting up a VPN like L2TP isn’t really an option.
Great point. PPTP should be avoided if you care about security. I have run PPTP with no encryption for more of a tunnel in situations where firewall and proxies are issues.
I’ve just tried OpenVPN. I have to say - it’s super easy to use. All your users need to do (on Windows) is to install OpenVPN client, get the ovpn file from you, double click it and connect! You can distribute login certificates in one file with the whole configuration, which makes it super easy to maintain .
have run PPTP with no encryption for more of a tunnel in situations where firewall and proxies are issues.
I have vpn on my phone to connect to home network and when I am on my work’s wifi the only vpn that I can get to work is the pptp no encryption. Why is that? Its a cisco based wireless system/controller and goes through a sonicwall with minimal filtering. I talked to the sonic wall guy but he didn’t know. The public wireless AP we send out pretty much unfiltered. I was suggested to go through the internal network AP but I am trying to avoid that for personal reasons.
I just don’t understand why only a non-encrypted vpn would pass. *puts on tinfoil hat.