[isalist] Re: More ISA VPN questions
- From: Thomas W Shinder MD <tshinder@xxxxxxxxxxx>
- To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
- Date: Sun, 10 Apr 2011 15:41:26 +0000
Where am I? ;)
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Steven Comeau
Sent: Friday, April 08, 2011 8:34 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: More ISA VPN questions
Tommy, Tommy, time to wake up...you've got to get ready for school....
Steve Comeau
Associate Director of IT Rutgers Athletics
83 Rockafeller Road
Piscataway, NJ 08854
732-445-7802
732-445-4623 (fax)
www.scarletknights.com<http://www.scarletknights.com>
[Description: rutgers100px.gif]
[Description:
C:\Users\scomeau.SK\AppData\Roaming\Microsoft\Signatures\Steve21.jpg]
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Thomas W Shinder MD
Sent: Thursday, April 07, 2011 9:15 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: More ISA VPN questions
Can we put together a class action against incompetent auditors?
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Tuesday, February 22, 2011 9:00 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: More ISA VPN questions
<skweeeeeeeeee>
As with many of them, your PCI auditors are 1d10t'5. There is nothing about
PCI that has anything at all to do with controlling or encryption of network
traffic.
Exactly what aspect of ISAKMP are they claiming to be "vulnerable" and what is
the basis for this claim?
Perhaps, it's http://isc.sans.edu/diary.html?storyid=852 (guessing here)?
If so, and you can't get an exception, then you can go back to PPTP or deploy
TMG and use SSTP or deploy UAG and use DirectAccess.
As you may have noticed, you can't simultaneously disable ISAKMP and deploy
IPsec.
Jim
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Steven Comeau
Sent: Tuesday, February 22, 2011 6:44 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: More ISA VPN questions
Tap, tap, tap... is this thing on?
Steve Comeau
Associate Director of IT Rutgers Athletics
83 Rockafeller Road
Piscataway, NJ 08854
732-445-7802
732-445-4623 (fax)
www.scarletknights.com<http://www.scarletknights.com>
[Description: rutgers100px.gif]
[Description:
C:\Users\scomeau.SK\AppData\Roaming\Microsoft\Signatures\Steve21.jpg]
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Steven Comeau
Sent: Friday, February 18, 2011 4:38 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] More ISA VPN questions
Let's see if someone can answer this one... I have ISA2006 running at all my
sites.
I have to pass PCI compliancy. One of the things being brought up now is that
I am running a vulnerable ISAKMP service (I'm use L2TP/IPSec for my
site-to-site VPNs and for the clients). How do I turn off the less secure
encryption protocols?
Steve Comeau
Associate Director of IT Rutgers Athletics
83 Rockafeller Road
Piscataway, NJ 08854
732-445-7802
732-445-4623 (fax)
www.scarletknights.com<http://www.scarletknights.com>
[Description: rutgers100px.gif]
[Description:
C:\Users\scomeau.SK\AppData\Roaming\Microsoft\Signatures\Steve21.jpg]
*** This message contains confidential information and is
intended only for the individual named. If you are not the
named addressee, you should not disseminate, distribute or
copy this e-mail. Please notify the sender immediately by
e-mail if you have received this e-mail by mistake and delete
this e-mail from your system. E-mail transmission cannot be
guaranteed to be secure or error-free as information could be
intercepted, corrupted, lost, destroyed, arrive late or
incomplete, or contain viruses. The sender therefore does not
accept liability for any errors or omissions in the contents of
this message, which arise as a result of e-mail transmission.
If verification is required please request a hard-copy version.
Rutgers University - DIA
83 Rockafeller Road
Piscataway, NJ 08854
www.scarletknights.com<http://www.scarletknights.com> ***
*** This message contains confidential information and is
intended only for the individual named. If you are not the
named addressee, you should not disseminate, distribute or
copy this e-mail. Please notify the sender immediately by
e-mail if you have received this e-mail by mistake and delete
this e-mail from your system. E-mail transmission cannot be
guaranteed to be secure or error-free as information could be
intercepted, corrupted, lost, destroyed, arrive late or
incomplete, or contain viruses. The sender therefore does not
accept liability for any errors or omissions in the contents of
this message, which arise as a result of e-mail transmission.
If verification is required please request a hard-copy version.
Rutgers University - DIA
83 Rockafeller Road
Piscataway, NJ 08854
www.scarletknights.com<http://www.scarletknights.com> ***
*** This message contains confidential information and is
intended only for the individual named. If you are not the
named addressee, you should not disseminate, distribute or
copy this e-mail. Please notify the sender immediately by
e-mail if you have received this e-mail by mistake and delete
this e-mail from your system. E-mail transmission cannot be
guaranteed to be secure or error-free as information could be
intercepted, corrupted, lost, destroyed, arrive late or
incomplete, or contain viruses. The sender therefore does not
accept liability for any errors or omissions in the contents of
this message, which arise as a result of e-mail transmission.
If verification is required please request a hard-copy version.
Rutgers University - DIA
83 Rockafeller Road
Piscataway, NJ 08854
www.scarletknights.com ***
Other related posts:
