@article{Heryanto_Setiawan_Audrey_Hermansyah_Afifah_Azhar_Idris_Budiarto_2025, place={Purwokerto}, title={Security and Performance Evaluation of PPTP-Based VPN with AES Encryption in Enterprise Network Environments }, volume={6}, url={https://jutif.if.unsoed.ac.id/index.php/jurnal/article/view/4818}, DOI={10.52436/1.jutif.2025.6.4.4818}, abstractNote={<p class="ABSTRAKTITLE" style="margin: 0in; text-align: justify;"><span lang="EN-US" style="font-size: 11.0pt; font-weight: normal;">In the context of the current digital era, Virtual Private Networks (VPNs) serve a critical function in ensuring the confidentiality and integrity of data transmitted across public networks, particularly within corporate environments. This study presents a comprehensive analysis of VPN security and performance, with a specific focus on the Point-to-Point Tunneling Protocol (PPTP) and the implementation of encryption algorithms such as AES-128 and AES-256. Despite the widespread adoption of PPTP due to its simplicity and broad compatibility, it exhibits significant security vulnerabilities, primarily stemming from its reliance on the outdated RC4-based Microsoft Point-to-Point Encryption (MPPE) and the susceptible MS-CHAP authentication protocol, which is highly vulnerable to brute-force and dictionary attacks. Empirical findings indicate that, although AES-128 and AES-256 introduce minor performance trade-offs compared to unencrypted configurations, AES-256 demonstrates markedly enhanced security, achieving a 98.9% authentication success rate and a threat detection time of 122 milliseconds. Nevertheless, increased user load adversely impacts network performance, with throughput declining from 95 Mbps to 40 Mbps as the user count rises from 5 to 50, accompanied by elevated latency and packet loss. Comparative analysis across three encryption scenarios AES-128, AES-256, and MPPE-PPTP reveals a consistent degradation in network performance as user load increases, with AES-256 offering the strongest security at the cost of slightly reduced throughput and increased latency under high-load conditions. MPPE-PPTP, while providing better throughput, lacks adequate security, making it unsuitable for high-risk environments. Based on these observations, this study recommends the implementation of AES-256 encryption in enterprise networks requiring high security, supported by continuous performance monitoring and strategic capacity planning. Furthermore, the adoption of a secure site-to-site VPN architecture is proposed to facilitate reliable and secure communication between geographically distributed office locations.</span></p>}, number={4}, journal={Jurnal Teknik Informatika (Jutif)}, author={Heryanto, Ahmad and Setiawan, Deris and Audrey, Berby Febriana and Hermansyah, Adi and Afifah, Nurul and Azhar, Iman Saladin B. and Idris, Mohd Yazid Bin and Budiarto, Rahmat}, year={2025}, month={Aug.}, pages={2171–2186} }