Introducing VPN Solutions Flashcards
What is a Virtual Private Network?
A VPN is an encrypted connection between private networks over a public network such as the internet.
What two authentication methods are used by IPsec to authenticate peers?
Pre-Shared Keys and RSA signatures
What RSA signatures are used with IPsec?
Rivest, Shamir, and Adelman
What type of devices can be VPN gateways?
Routers, Firewalls, VPN concentrators
What Cisco specific device can be a VPN gateway?
Cisco ASA 5500
What is Cisco Easy VPN?
Cisco Easy VPN is a cost-effective solution for deploying VPN that is ideal for remote offices that have little ideal IT support.
What are the two components of Cisco VPNs?
Cisco Easy VPN Server, and Cisco Easy VPN Remote
What is Cisco Easy VPN Server?
The VPN server is a dedicated VPN gateway that can terminate VPN tunnels as well as site-to-site VPNs
What is Cisco Easy VPN Remote?
The VPN remote enables Cisco hardware clients to receive security policies from a Cisco Easy VPN server..
What VPN parameters can an administrator configure on Cisco Easy VPN server to be pushed to a Cisco Easy VPN remote client?
Internal IP addresses, internal subnet masks, DHCP addresses, WINS server addresses, split-tunneling flags
What are some benefits of using the Cisco Easy VPN solution?
Dynamic configuration of end-user policies // Local VPN configuration is independent of the remote peer IP // Centralized security management // Enables large-scale deployments with rapid user provisioning // Removes the need for end users to install and configure Cisco Easy VPN remote software on their PCs
What are the two main IPsec framework protocols?
Authentication Header (AH) & Encapsulation Security Protocol (ESP)
What is an SSL VPN or WebVPN?
Provides remote-access connectivity from almost any internet enabled location using a web browser and native SSL encryption
What is an example of an SSL or WebVPN?
Citrix
What is the Authentication Header?
AH provides authentication and data integrity using its algorithms. AH does not encrypt packets, and is used with ESP to provide encryption with tamper-aware security
What is Encapsulating Security Protocol?
ESP is an encryption algorithm that encrypts the IP packet and ESP header, which conceal the data payload and identities of the source / destination.
What are the two modes of cisco WebVPN?
Clientless // Thin Client
What is IPsec?
Network layer protocol that protects and authenticates packets.
What four security services does IPsec provide?
Confidentiality // Integrity // Authentication // Antireplay protection
What is Antireplay protection?
Antireplay protection verifies that each packet is unique and not duplicated. This is done by comparing the sequence number of the received packets with a sliding window of the destination host or gateway.
For IPsec encryption to work in a VPN, what must both the sender and receiver be configured with?
The sender and receiver must be configured with the same transform set.
In a VPN, what is degree of security based on?
The degree of security is based on the encryption algorithm used and the length of the key.
List three types of encryption algorithms supported by IPsec.
Data Encryption Standard (DES) // Triple DES (3DES) // Advance Encryption Standard (AES)
What is a transform set in relation to IPsec?
A transform set is the rules used to encrypt the traffic through the VPN. These rules are based on an algorithm and a key.
What is the Diffie-Hellman Key Exchange?
The Diffie-Hellman (DH) Key Exchange is a public key exchange that exchanges symmetric shared secret keys
How does IPsec ensure data integrity?
Uses Hash Based Messaged Authentication (HMAC) code to determine if been tampered
What are two common HMAC algorithms used by IPsec?
Message Digest Algorithm 5 (MD5) // Secure Hash Algorith 1 (SHA-1)
What are the two types of VPNs?
Site-to-Site // Remote Access
List Six Cisco Easy VPN restrictions.
Manual NAT or PAT is not allowed // Only one destination peer and only one tunnel connection supported // Digital certificates are not supported // Only ISAKMP is supported on IPsec servers // Transform sets that provide encryption without authentication are not supported (DES, ESP, and 3DES)
What is manual NAT or PAT not allowed in Cisco Easy VPN?
Cisco Easy VPN Remote automatically creates the appropriate NAT or PAT configuration for the VPN tunnel
