Microsoft has pioneered integration of VPN solutions, and continues to work with industry partners and the Internet Engineering Task Force (IETF) to evolve the technology and security of virtual private networks. This paper looks at VPN security, the continuum of security challenges, and the different ways in which Microsoft VPN's provide security solutions.

Microsoft VPN solutions cover a spectrum of security needs. The Point-to-Point Tunneling Protocol (PPTP), which is available from Microsoft for the Windows 95, Windows 98, and Windows NT 4.0 operating systems, as well as on Windows 3.1 and Macintosh from third parties, was designed to provide the lowest Total Cost of Ownership. PPTP runs well on a wide variety of hardware, supports password authentication, and does not require implementation of a certificate infrastructure, although certificate support will be available in the Windows 2000 time frame.

Microsoft's implementations of Layer 2 Tunneling Protocol (L2TP) and Internet Protocol Security (IPSEC), which is available on the Windows 2000 platform, are designed to provide the highest possible security. Consequently, these VPN solutions require deployment of a Public Key Infrastructure, and require a Pentium-class processor.

This paper is intended to assist network administrators and other decision-makers in assessing the VPN security needs of their organization and choosing the solution that best fits their needs. The paper will also look at the role that security policy and employee education play in protecting a network, regardless of the technology deployed.
Securing a network is a dynamic, rather than a static challenge. All security represents a balancing act between protecting against potential security threats while not bogging down network or organizational performance.

Microsoft is committed to evolving its technology to provide the most powerful security solutions, while making the technology easy to deploy and manage.

The robust security of Microsoft VPN solutions allow organizations to take advantage of the convenience and cost savings of tunneling through public networks, without opening the door to unauthorized access.