VPN Client - Username & Password
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-11-2004 02:26 AM
Before an IPSec tunnel is established between the client and the concentrator, how are the user name and password being protected? Are they being sent in clear text?
Please advise.
- Labels:
-
VPN
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-11-2004 03:20 AM
The Username and Password are protected by the ISAKMP session.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-11-2004 01:46 PM
The user name and password are not sent until after the Security Association has been established (keys negotiated, security parameters mutually accepted, and encryption started). When the name and password are sent they are encrypted and protected by the SA.
HTH
Rick
Rick
