In general, L2TP/IPSec is considered to be more secure than PPTP, and this is why some ORGANIZATIONS have started using this protocol to IMPLEMENT remote connectivity. In L2TP/IPSec, every packet is checked for data integrity, data authentication, data confidentiality, and replay protection. Effectively, what this means is that every packet is checked to ensure that data was sent by an authorized user, it was not modified in transit, none of the packets are captured without ENCRYPTION, and a stream of captured packets is not re-sent.

PPTP, on the hand, provides only data confidentiality.

Also, the fact that L2TP/IPSec uses TWO levels of authentication MAKES it more secure than PPTP.

In general, L2TP/IPSec is considered to be more secure than PPTP, and this is why some organizations have started using this protocol to implement remote connectivity. In L2TP/IPSec, every packet is checked for data integrity, data authentication, data confidentiality, and replay protection. Effectively, what this means is that every packet is checked to ensure that data was sent by an authorized user, it was not modified in transit, none of the packets are captured without encryption, and a stream of captured packets is not re-sent.

PPTP, on the hand, provides only data confidentiality.

Also, the fact that L2TP/IPSec uses two levels of authentication makes it more secure than PPTP.