PPTP (Point-to-Point Tunneling Protocol) is a point-to-point tunneling protocol and one of the oldest VPN protocols. It was developed by a consortium of companies led by Microsoft, with significant contributions from Microsoft and Ascend Communications, rather than being developed solely by Cisco. PPTP became widely supported by Microsoft Windows and was built into Windows starting with Windows 95.
Technical Characteristics of PPTP
Key characteristics include:
- works together with PPP (Point-to-Point Protocol) by encapsulating PPP frames;
- uses a TCP connection on port 1723 to establish and control the tunnel;
- can use MPPE (Microsoft Point-to-Point Encryption) to encrypt PPP traffic, while client authentication can be performed using mechanisms such as MS-CHAPv1, MS-CHAPv2, or EAP-TLS, depending on the configuration.
PPTP has been found to contain serious security weaknesses. MS-CHAPv1 is considered fundamentally insecure, while MS-CHAPv2 has also been shown to be vulnerable to practical attacks under certain conditions. As a result, PPTP can no longer be considered a secure VPN protocol.
Advantages of PPTP
- easy to configure: PPTP has a relatively simple configuration process;
- fast: its low overhead can provide good performance, making it suitable for bandwidth-intensive activities such as audio and video streaming when security is not a concern;
- widely compatible: PPTP requires relatively few system resources and was supported by a broad range of operating systems and older devices.
Disadvantages of PPTP
The main and decisive disadvantage of PPTP is its poor security. The protocol is obsolete and should not be used when confidentiality or protection against network interception is important. Modern VPN protocols such as OpenVPN, IKEv2, or WireGuard are much safer alternatives.