PPTP and L2TP deprecation: A new era of secure connectivity

As technology evolves, security protocols must also evolve. As part of our ongoing effort to provide the highest level of security and performance, future versions of Windows Server will deprecate the Point-to-Point Tunneling Protocol (PPTP) and Layer 2 Tunneling Protocol (L2TP) protocols. These protocols have served us well over the years and will continue to serve our users for years to come, but it is time to move on to more secure and efficient alternatives: SSTP and IKEv2.

In this post, we’ll look at deprecation considerations, reasons, and recommendations to help you leverage the best security options.

What does deprecation of support for PPTP and L2TP mean?

Deprecation is not removal. Deprecation refers to a stage in the product life cycle where a specific feature is no longer under active development and may be removed in a future release. Features and functionality are added and occasionally removed in new releases of the product. If it’s been removed, it’s usually because a better option has been added. Deprecated features will continue to function and be fully supported until they are officially removed. We are confident that your management strategy already includes the product life cycle. Nonetheless, deprecation notifications may unfold over months or years to help you make the necessary transition. After uninstallation, the feature will no longer work.

PPTP and L2TP have been reliable tools in the world of VPN technology. However, as cyber threats become increasingly sophisticated, these protocols become less effective in providing the strong security needed to protect data. Their vulnerabilities are well documented and they are no longer sufficient to meet current security standards.

Switch to SSTP and IKEv2

To continue to enjoy the best security benefits, we recommend switching to Secure Socket Tunneling Protocol (SSTP) and Internet Key Exchange version 2 (IKEv2). These protocols offer improved security features, faster connection speeds, and improved reliability.

Benefits of SSTP

• Strong encryption: SSTP uses SSL/TLS encryption to provide a secure communication channel.
• Firewall traversal: SSTP easily passes through most firewalls and proxy servers, ensuring a smooth connection.
• Ease of use: With native support in Windows, SSTP is simple to configure and deploy.

Benefits of IKEv2

• High security: IKEv2 supports strong encryption algorithms and strong authentication methods.
• Mobility and multihoming: IKEv2 is especially effective for mobile users because it maintains VPN connectivity even during network changes.
• Improved performance: IKEv2 offers superior performance over legacy protocols through faster tunnel setup and lower latency.

Steps to Transition to SSTP and IKEv2

PPTP and L2TP can still be used if you want to establish outgoing VPN connections based on these protocols. This also applies to future server and client SKU releases. However, what changes is that the Windows RRAS server (VPN server) will not accept incoming VPN connections based on these protocols.

So for step-by-step instructions on how to switch to SSTP/IKEv2, see detailed instructions here. How to Install and Configure Remote Access (RAS) as a VPN Server.

conclusion

Deprecation of PPTP and L2TP is a necessary step to maintain the highest security standards. Switching to SSTP and IKEv2 will ensure that network communications remain secure, efficient, and reliable. We are here to support you through this transition. If you have any questions or need further assistance, please contact our support team.