Re: Cisco VPN Client Profile – safe to email?

Home Forums Networking Cisco Security – PIX/ASA/VPN Cisco VPN Client Profile – safe to email? Re: Cisco VPN Client Profile – safe to email?

#325068

Re: Cisco VPN Client Profile – safe to email?

Those PCF files can be read in clear text with any text editor. The group password is hashed though but the contents are still clear text. And thus if someone has access to the mailbox or the email in transit assuming you aren’t using any method of encryption (Digital ID’s etc) then there is a possibility that it could be opened by someone else that it was not intended for.
There’s nothing to stop you from pasting the contents of the PCF file into an email and advising the recipient to save the file as a PCF file. In essence though the issue still remains.
If you’re really worried about security do you have any other means of secure transfer such as FTP/SSL or SCP? Or even encrypted email?