SineSwiper wrote:Well, what I mean is that if I'm on a wireless connection from my work laptop, I can just connect to my work's VPN, and I've got a completely secured wireless connection.
Well yeah, of course... but this is so you can protect yourself FROM work in most cases. I'm always getting people in trouble for trying to proxy around our security... so when I found this way was almost foolproof I wasn't happy.
I more learned about it and got pissed off that Websense is so stupid with ports... it doesn't notice that "Hey, that guy's doing SSH on port 443" it just assumes since it's on 443 it's HTTPS... My IDS system detects it to a degree (it notices SSH is being done on a "high port") but only briefly.