Navigation section
mschapv2
About this tag
MSCHAPv2 is a Microsoft authentication protocol commonly used with PPTP VPNs. Discussions on WindowsForum.com highlight security concerns, particularly man-in-the-middle attacks that can expose domain credentials. Microsoft released Security Advisory 2743314 to address this vulnerability, recommending organizations review the guidance. A related thread advises implementing PEAP-MS-CHAP v2 authentication to encapsulate MSCHAPv2 traffic in TLS, mitigating known attacks. These sources focus on enterprise IT security, VPN configuration, and Microsoft's response to authentication vulnerabilities.
-
Security Advisory 2743314 released
Today, we published Security Advisory 2743314, which provides guidance that will help protect customers from a technique that could allow a man-in-the middle attack to obtain a user’s domain credentials when VPN is configured to use PPTP and MSCHAPv2. Customers concerned with this...- News
- Thread
- advisory credentials cybersecurity data security guidance man-in-the-middle microsoft mschapv2 msrc network security pptp risk management security tech updates threat mitigation trustworthy computing user protection vpn
- Replies: 0
- Forum: Security Alerts
-
Implementing PEAP-MS-CHAP v2 authentication for Microsoft PPTP VPNs
Provides recommendations for organizations that use MS-CHAP v2/PPTP to implement the Protected Extensible Authentication Protocol (PEAP) in their networks. This mitigates known attacks by encapsulating the MS-CHAP v2 authentication traffic in TLS. More...- News
- Thread
- authentication encapsulation mitigation mschapv2 network security peap pptp recommendations tls vpn
- Replies: 0
- Forum: Knowledge Base (KB)