Book Image

Practical Network Scanning

By : Ajay Singh Chauhan
Book Image

Practical Network Scanning

By: Ajay Singh Chauhan

Overview of this book

Network scanning is the process of assessing a network to identify an active host network; same methods can be used by an attacker or network administrator for security assessment. This procedure plays a vital role in risk assessment programs or while preparing a security plan for your organization. Practical Network Scanning starts with the concept of network scanning and how organizations can benefit from it. Then, going forward, we delve into the different scanning steps, such as service detection, firewall detection, TCP/IP port detection, and OS detection. We also implement these concepts using a few of the most prominent tools on the market, such as Nessus and Nmap. In the concluding chapters, we prepare a complete vulnerability assessment plan for your organization. By the end of this book, you will have hands-on experience in performing network scanning using different tools and in choosing the best tools for your system.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Contributors
Preface
Index

Type of VPN protocol


VPN types are distinguished by the various tunnelling protocols, such as PPTP, and L2TP with IPSec. Each of these VPN protocols offer different features and levels of security.

Point-to-Point tunneling protocol

PPTP remains a popular network protocol – especially on Windows computers - and it is one of the oldest protocols still in use. This has been developed by Microsoft to encapsulate another protocol called point-to-point. PPTP uses underlying authentication protocols such as MS-CHAP (Challenge Handshake Authentication Protocol (CHAP))—v1/v2, which are subject to serious security vulnerabilities. PPTP VPN encrypts data using 128-bit encryption, which makes it the fastest, but the weakest in terms of security.

Layer 2 Tunneling Protocol

L2TP is developed by combining characteristics of the Layer 2 Forwarding Protocol (L2F), designed by Cisco, with those of  PPTP, designed by Microsoft. As L2TP does not offer confidentiality and encryption features on its own, another...