Home > Ask the Security Experts > Network Security Questions & Answers > Should enterprises implement a mandatory iPhone VPN?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Should enterprises implement a mandatory iPhone VPN?

Mike Chapple EXPERT RESPONSE FROM: Mike Chapple

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 01 March 2008
I've heard that some vendors are beginning to offer VPN support for the iPhone. We have a number of iPhone users in our organization. At what point should we consider a mandatory iPhone VPN?

>
EXPERT RESPONSE
The iPhone actually includes a built-in VPN client that supports standard PPTP and L2TP VPNs. Unless your organization only supports IPsec VPN connections, you should be able to configure the iPhone to access your existing corporate VPN. You can access the iPhone's VPN capability by choosing General → Network → VPN from the Settings screen. If you have no choice other than IPsec, hold on to your seat. Apple is promising to support the Cisco IPsec VPN client in version 2.0 of the iPhone software, due out this summer.

The decision about mandating VPN usage depends upon your organization's security requirements. Mandatory VPNs are worth considering in the following circumstances:

  • You use content filtering on your network and wish to limit the network access of iPhone users.
  • You're concerned about users accessing unencrypted services on a public network and wish to provide a secure tunnel back to your corporate network.

    When it comes to making decisions about VPN use, there's honestly not much difference between an iPhone and any other computing device. If you require VPN connections for all travelling laptops, it probably makes sense to also require them for iPhones. If you allow travelling users to access the Internet directly, you can implement the same policy for iPhones.

    More information:

  • A reader asks Mike Chapple, "How expensive are IPsec VPN setup costs?"
  • Learn how a DMZ server and VPN are able to co-exist.


  • Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


    RELATED CONTENT
    Network Security
    What are the differences between intrusion detection and intrusion prevention?
    Will there be DMZ routing issues if several firewalls serve as the default gateway?
    What are the top LAN security issues in a client-server network environment?
    Should tunnel connections be initiated from an ISP to a internal data center, or vice versa?
    What warning signs will indicate the presence of a P2P botnet?
    What reporting tools are available for an enterprise IDS?
    Is it possible to allow select access to IP addresses using Windows Server 2003?
    Is an IPsec VPN necessary when connecting remote servers that process financial transactions?
    What are best practices for creating an IDS and maintaining a signature database?
    What are the best ways to hide system information from network scanning software?

    SSL
    Debian: A niche OS with a not-so-niche security flaw
    The Shortcut Guide to Extended Validation SSL Certificates
    Product review: Array Networks SPX2000
    How to test the security of personal details submitted to a website
    Should iPhone email be sent without SSL encryption?
    How to secure an FTP connection
    Can Trojans and other malware exploit split-tunnel VPNs to infiltrate a network?
    What are the risks of connecting a Web service to an external system via SSL?
    What is the most secure way for application developers to manage cookies?
    For a small office, what are the best, least expensive office servers with secure access?

    Handheld and Mobile Device Security
    Smartphone security: The growing threat of mobile malware
    Alcatel-Lucent's 3G laptop security card goes international
    Recovering stolen laptops one step at a time
    Is the iPhone amenable to any method of email encryption?
    Smartphones opening up enterprise risks
    BlackBerry server faced with critical zero-day
    Does the iPhone SDK effectively increase the risk iPhones pose?
    Do you think introducing Wi-Fi to airplanes is a good idea security-wise?
    Has proof-of-concept mobile device malware translated into any meaningful attacks?
    Product review: Credant Mobile Guardian 6.0
    Handheld and Mobile Device Security Research

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    SSL VPN  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    Targeted Security Channel Tips for Resellers, Integrators and Consultants
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




    All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts