Educause Security Discussion mailing list archives

Re: vpn split tunnel or no split tunnel


From: Valdis Kletnieks <Valdis.Kletnieks () VT EDU>
Date: Mon, 7 Feb 2011 17:04:20 -0500

On Mon, 07 Feb 2011 14:15:16 CST, "James R. Pardonek" said:

Depending on how it is configured, it is possible for a user to
inadvertently route traffic between the user's ISP and the tunnel.  So
if the user's computer gets hacked, it is possible for a malicious
hacker to gain access to your internal network via the split tunnel.
For that reason, we do not allow split tunneling.

Of course, if the user's machine is that heavily compromised, the miscreant
controlling the machine is able to set it to be split tunneling no matter what
you thought you had configured. :)

Attachment: _bin
Description:


Current thread: