Virtual Private Network - Revision history

Tom: /* Problems */

2024-05-10T19:22:37Z

‎Problems

2024-05-10T19:21:51Z

‎Problems

2022-11-06T00:49:06Z

‎Apple

2022-10-10T01:20:24Z

‎Apple

2022-10-10T01:13:26Z

‎Android

2022-10-09T22:51:05Z

‎Android

2022-10-09T22:45:53Z

‎Android

2022-10-09T22:37:47Z

‎Context

2022-10-09T22:33:37Z

‎Context

2022-10-08T18:48:10Z

‎Android

@@ Line 8: / Line 8: @@
 * Each device on the network has equal access to the network, even if that device has been compromised. (Since this page is about commercial networks, we do not address partitioned networks such as those found in the Military.)
 * Note that a [[Zero Trust Architecture]] requires additional [[Authentication]] for each use of the network above and beyond that supplied by the network itself.
-*  VPNs have been used to anonymize the user's IP address, but this can be nullified if option 121 is enabled. This can be avoided if Android or a user controlled DHCP is created.<ref>Dan Goodin ''Novel attack against virtually all VPN apps neuters their entire purpose'' 2024-05-06 arsTechnica https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/</ref>
+*  VPNs have been used to anonymize the user's IP address, but this can be nullified if option 121 is enabled. This can be avoided if Android is used or a user controlled DHCP is created.<ref>Dan Goodin ''Novel attack against virtually all VPN apps neuters their entire purpose'' 2024-05-06 arsTechnica https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/</ref>
 ==Solutions==

@@ Line 8: / Line 8: @@
 * Each device on the network has equal access to the network, even if that device has been compromised. (Since this page is about commercial networks, we do not address partitioned networks such as those found in the Military.)
 * Note that a [[Zero Trust Architecture]] requires additional [[Authentication]] for each use of the network above and beyond that supplied by the network itself.
 ==Solutions==

← Older revision		Revision as of 00:49, 6 November 2022
Line 16:		Line 16:

	whenever you visit a predefined webpage, or you use a predefined ip address, the vpn connection will automaticly be established and the traffic for that specific webpage or ip address wlil automaticly be forwarded through that vpn connection.</blockquote>		whenever you visit a predefined webpage, or you use a predefined ip address, the vpn connection will automaticly be established and the traffic for that specific webpage or ip address wlil automaticly be forwarded through that vpn connection.</blockquote>
		+
		+	* [https://developer.apple.com/documentation/devicemanagement/vpn MDM VPN]

	===Android===		===Android===

@@ Line 13: / Line 13: @@
 ===Apple===
 * Does all traffic pass through VPN? <blockquote>This depends on your settings. The most common setup is “Host to Network“, in which case only traffic to the specified remote network(s) will go through the VPN tunnel. With a “Host to Everywhere” setup, all traffic – except traffic to the local network(s) – goes through the VPN. </blockquote>
 ===Android===
 * [https://developer.android.com/guide/topics/connectivity/vpn VPNs on android developer site] include some legacy implementations. This page assumes Android 7 or later.

@@ Line 11: / Line 11: @@
 ==Solutions==
 ===Android===
 * [https://developer.android.com/guide/topics/connectivity/vpn VPNs on android developer site] include some legacy implementations. This page assumes Android 7 or later.

@@ Line 4: / Line 4: @@
 ==Context==
 Ever since [[Enterprise]] employees started to travel with laptop computers the [[Enterprise]] has deployed [[Virtual Private Network]]s so the remote employees could function as though they were at their own desk in the home office. VPNs allow devices that aren’t physically on a network to securely access the devices that are on the network.
 * Note that a [[Zero Trust Architecture]] requires additional [[Authentication]] for each use of the network above and beyond that supplied by the network itself.

@@ Line 9: / Line 9: @@
 ===Android===
 * [https://developer.android.com/guide/topics/connectivity/vpn VPNs on android developer site]
-* '''[https://developer.android.com/guide/topics/connectivity/vpn Blocked connections]''' A person using the device (or an IT admin) can force all traffic to use the VPN. The system blocks any network traffic that doesn’t use the VPN. People using the device can find the Block connections without VPN switch in the VPN options panel in Settings. Caution: When non-VPN traffic is blocked, apps that aren’t in an allowed list or in a disallowed list lose their network connection. Consider warning people when making allowed or disallowed lists. To learn more, see the following Per-app VPN section.
+* '''[https://developer.android.com/guide/topics/connectivity/vpn Blocked connections]''' A person using the device (or an IT admin) can force all traffic to use the VPN. The system blocks any network traffic that doesn’t use the VPN. People using the device can find the Block connections without VPN switch in the VPN options panel in Settings. Caution: When non-VPN traffic is blocked, apps that aren’t in an allowed list or in a disallowed list lose their network connection. Consider warning people when making allowed or disallowed lists.
 ===Pixel VPN===