Security

Ask something
Discussion Locked

Default gateway TCP/IP (VPN)

0 helpful
7 replies

by kymmie

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

I have discovered that while in a vpn session, if the "use default gateway for remote network" is unchecked found in the advanced tcp/ip settings for my vpn connection I can surf the Internet.

By unchecking this am I exposing my remote network? If not, why has Microsoft set it to be checked by default?

Thanks.

7 replies

by scottdo10

Yes you are exposing it if someone were to get hack your machine. You can browse the internet, but also someone to get to and from your machine. So if you are connected VPN with the use default gateway unchecked someone can possibly get on your machine and then have full access to the remote network. I always recommend to leave it checked, VPN in and do what you have to and if you need to browse disconnect.

by kymmie

If unchecking this is not secure, then is there software that can allow a user to be in a vpn and still use the Internet? (W9x, and Windows 2000 Professional)

I would appreciate any feedback. Thanks.

by kymmie

Thanks,

What about if the user has a hardware firewall in place? Will having that make any difference in your opinion to check or uncheck this box?

by scottdo10

Sorry I hadn't seen your next comment until now. Any firewall makes a huge difference because that eliminates the inbound traffic from the internet to the machine that would be the security breach when using VPN. Even if Hardware wasn't in place Iwould recommend using a personal firewall on the machines having VPN.

This discussion is closed to new replies.