OpenVPN is one of the power players in the online privacy world. Luckily, there are a number of enterprise-level, open source VPN solutions that will meet the needs of any corporation, large or small. These disclosures have left many organizations wondering whether they can trust these industry titans with their sensitive information or if they should abandon VPNs altogether. While the SSL validation problem has been resolved for Pulse 5.3R4.2 and Pulse 5.2R9, the Carnegie Mellon researchers still warn against using it on untrusted networks.Īfter suffering from similar vulnerabilities, Cisco Adaptive Security Appliance software resolved its SSL validation problems, but didn't address whether it should be avoided on untrusted networks. This left enterprise-level clients open to man-in-the-middle (and other) attacks. In early February, the Software Engineering Institute at Carnegie Mellon University posted an advisory warning stating that the Pulse Secure VPN graphic user interface failed to validate SSL certificates when connecting to websites. In recent months, many popular online security and VPN vendors have come under fire after unaddressed vulnerabilities in their products left users open to serious threats.

Cisco easy vpn client download free