OpenVPN old security scheme?

OpenVPN old security scheme?

OpenVPN old security scheme?
OpenVPN old security scheme?
Sunday - last edited Monday
Tags: #VPN
Model: Deco BE85  
Hardware Version:
Firmware Version: 1.0.19 Release 42399

Hello,

how secure is the OpenVPN implementation on Deco85? My client on Windows 11 is alerting me of not using AES-256-CBC encryption, it is alerting me of the compression used making it vulerable to the VORACLE attack.

It would be nice to have an advance setting option for such important secure setting as a VPN Server.

I'd like to know if there's any workaround for this.

Thank you.

  1      
  1      
#1
Options
1 Accepted Solution
Re:OpenVPN old security scheme?-Solution
Monday - last edited Monday

  @dogocheco 

Hi, it will eventually come via the Deco APP and you could also manually update this version through the Web UI.

Deco firmware upgrades are usually rolled out in waves according to the MAC address so users might detect the latest versions at various times.

Thank you very much and best regards.

Recommended Solution
  1  
  1  
#4
Options
3 Reply
Re:OpenVPN old security scheme?
Monday

  @dogocheco 

Hi, Thank you very much for the feedback.

Deco BE85 has added the WireGuard VPN on the latest 1.1.1 version, which is more secure and fast.

You could consider setting up a VPN server via WireGuard VPN protocol:

Deco BE85_1.1.1 Supports WireGuard VPN,Channel Selection and Matter

 

Thanks again and best regards.

 

  0  
  0  
#2
Options
Re:OpenVPN old security scheme?
Monday - last edited Monday

  @David-TP 

thabk you for the reply. I just updated to version 1.0.20 and it says no more updates. Is this a manual update or will it eventually come via the app too?

thank you

  1  
  1  
#3
Options
Re:OpenVPN old security scheme?-Solution
Monday - last edited Monday

  @dogocheco 

Hi, it will eventually come via the Deco APP and you could also manually update this version through the Web UI.

Deco firmware upgrades are usually rolled out in waves according to the MAC address so users might detect the latest versions at various times.

Thank you very much and best regards.

Recommended Solution
  1  
  1  
#4
Options