Data encryption between VPN server and client

Data encryption
we should use data encryption to provide data confidentiality for the data that is sent the data between the VPN client and the VPN server across a shared or public network, where there is most of chance to risk of unauthorized people hack our network may be we face lot of problem.

we can configure the VPN server to force encrypted communications and then another person can't enter in our network. All Users who connect to his server must encrypt their data or a connection is not allowed enter any pertion his network without admin permition. For VPN connections, the Windows Server 2003 family uses Microsoft Point-to-Point Encryption with the Point-to-Point Tunneling Protocol and Internet Protocol security encryption with the Layer Two Tunneling Protocol.

Because data encryption is performed between the VPN client and VPN server, data encryption is not necessary on the communication link between a dial-up client and its Internet service provider but encription necessary only clients and server. For example, a mobile user uses a dial-up connection to dial in to a local ISP. Once the Internet connection is made, the user creates a VPN connection with the corporate VPN server. If the VPN connection is encrypted, encryption is not needed on the dial-up connection between the user and the ISP.


Data encryption for Point-to-Point Protocol or PPTP connections is available only if we use MS-CHAP, MS-CHAP v2, or EAP-TLS as the user-level authentication method.this is depend opon administrator which type of cncryption use his vpn connection. Data encryption for L2TP connections relies on IPSec computer-level authentication, which does because it is very high level provide security. not require any specific user-level authentication method.

VPN data encryption never provide end-to-end data encryption. clients and server data encryption between the client application and the server hosting the resource or service that is accessed by the client application. To get end-to-end data encryption, we can use IPSec to create a secure connection after the VPN connection compleeted.


Source: http://technet.microsoft.com/en-us/library/cc778013.aspx