That depends on a couple of things that you did not mention.
1) Are you using the VPN capability in the Cisco PIX itself?
2) Are you using the PIX to protect a different VPN solution?
In general though, one of the best ways to improve security is by having unique user IDs and passwords - administered by a different system (such as RADIUS, TACACS, etc.)
Bob
Last Wiki Answer Submitted: January 4, 2006 3:30 pm by Bobkberg1,070 pts.
If you live outside the United States, by submitting your email address you consent to having your personal data transferred to and processed in the United States.
For IPSec, choose better encryption (3DES or AES), use AH+ESP, use Replay Protection, and use a strong authentication (Radius with RSA SecurID etc.) for the users. Also, disable split tunneling whenever possible.
For SSL VPN, make sure to deply Host Checker features (to check the client desktop for some minimal level virus protection etc.)
There are enough resources available at CERT, SANS etc about deploying secure VPNs.
For IPSec, choose better encryption (3DES or AES), use AH+ESP, use Replay Protection, and use a strong authentication (Radius with RSA SecurID etc.) for the users. Also, disable split tunneling whenever possible.
For SSL VPN, make sure to deply Host Checker features (to check the client desktop for some minimal level virus protection etc.)
There are enough resources available at CERT, SANS etc about deploying secure VPNs.
-Ajay