Vpn Menu Features; Vpn Overview - McAfee SG310 Administration Manual

5

VPN menu features

Contents

VPN overview

About PPTP
PPTP VPN Server
L2TP VPN Server
L2TP VPN Client
IPSec VPN
IPsec example
Certificate management
IPSec failover
IPSec VPN offloading
Troubleshooting IPSec
Port tunnels
Creating nested port tunnels
VPN overview
VPN (Virtual Private Networking) enables two or more locations to communicate securely and effectively,
usually across a public network such as the Internet. VPN has the following key traits:
• Privacy — No one else can see what you are communicating.
• Authentication — You know who you are communicating with.
• Integrity — No one else can tamper with your messages or data.
Using VPN, you can access the office network securely across the Internet using PPTP (Point-to-Point
Tunneling Protocol), IPSec, or L2TP. If you take your portable computer on a business trip, you can dial a
local number to connect to your Internet access service provider (ISP) and then create a second connection
(called a tunnel) into your office network across the Internet and have the same access to your corporate
network as if you were connected directly from your office. Similarly, telecommuters can also set up a VPN
tunnel over their cable modem or DSL links to their local ISP.
VPN technology can be deployed as a low cost way of securely linking two or more networks, such as a
headquarters LAN to the branch offices. IPSec is generally the most suitable choice in this scenario.
With the McAfee UTM Firewall appliance, you can establish a VPN tunnel over the Internet using either
PPTP, IPSec, or L2TP. IPSec provides enterprise-grade security, and is generally used for connecting two or
more networks, such as a branch office to a head office. The strength of PPTP is its ease of configuration
and integration into existing Microsoft infrastructure. It is generally used for connecting single remote
Windows clients.
L2TP combines elements of IPSec and PPTP. It is generally used as a relatively easy way to configure a
PPTP-style connection from a remote Windows XP client with IPSec security.
This chapter details how to configure the L2TP and PPTP servers and clients, how to configure a remote
client to connect, how to establish an IPSec tunnel, and provides an overview of L2TP VPN tunneling. The
UTM Firewall appliance includes a PPTP and an L2TP VPN server. These allow remote Windows clients to
securely connect to the local network as shown in
McAfee UTM Firewall 4.0.4 Administration Guide
Figure 237.
239