Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Face-off: Mobile VPN isn not a better choice than an SSL VPN

Two industry insiders debate the best VPN approach for mobile users.
Face-off By Hitesh Sheth, Juniper , Network World , 11/24/2006
Newsletter Signup
  • Share/Email
  • Tweet This
  • Comment
  • Print

An SSL VPN is a comprehensive VPN, including being a mobile VPN. The real choice is whether you should select a proprietary, single-application, network layer-only VPN or a flexible, application- and network-layer SSL VPN for mobile users. The flexibility, low total cost of ownership and reliability of an SSL VPN will trump a proprietary approach every time.

SSL VPNs are very "wireless friendly" and offer everything companies demand from a mobile solution, such as application-session persistency, application policies and network-layer policies. SSL VPNs support seamless roaming and offer high performance and optimized throughput with compression and acceleration to compensate for any slow wireless link.

SSL VPNs work with a wide variety of applications and platforms, such as Windows, Linux, MacOS, Windows Mobile 5.0, PocketPC, PalmOS, Symbian and iMode, with just a browser. And all widely deployed mobile devices with Internet capability have a browser. The bottom line is user device support with SSL VPN is significantly less limiting than a proprietary mobile VPN.


Face-offMobile VPN is a better choice than an SSL VPN

SSL VPNs serve multiple IT functions by providing access to fixed employees (such as teleworkers), mobile workers, partners and customers with a single, centralized infrastructure -- providing access to applications regardless of whether workers are using a mobile device, home or corporate PC or laptop. Mobile VPNs serve only one constituency and require a separate VPN and client management infrastructure in the DMZ for mobile device access.

With SSL VPNs, if changes are made to back-end application servers or new servers are added, only changes to access-control policies are required on the centralized SSL VPN deployment and not on multiple VPN deployments. On the client side, a proprietary mobile VPN requires software to be installed for each device, typically resulting in ongoing maintenance costs associated with renewals, updates and support.

With mobile VPNs, users need to remember one specific VPN gateway just for mobile connectivity and separate ones for all other types of VPN connectivity. In contrast, SSL VPNs are clientless and are designed for a streamlined user experience.

SSL VPNs give IT managers more control, enabling them to provide access only to the specific applications for which a user and mobile device is approved, as opposed to effectively turning the mobile device into a node on the network and providing access to all back-end applications.

  • Share/Email
  • Tweet This
  • Comment
  • Print
Comments (4)
Login
Forgot your account info?

Clarify Netmotion Mobility Engineering & USAT CorpBy MobileGuru on January 29, 2007, 3:06 pmJust to clarify-- as I didn't want to sound negative. NetMotion's engineering team is tremendously capable in the middleware space. The benefit that USAT Corp. brought...

Reply | Read entire comment

NetMo-- benefits hard to discern, but try itBy MobileGuru on January 29, 2007, 2:35 pmNetMotion is a bit of a puzzle-- at first blush it seems like Windows already does this. Once you have used it, its value becomes immeasurable. It can be a huge...

Reply | Read entire comment

What products are you basing your conclusions on?By Anonymous on December 1, 2006, 8:59 amWe've used Mobile User VPN and SSL VPN products from several vendors over the last few years. Our conclusion was that our Watchguard SSL VPN (Based on Citrix Access...

Reply | Read entire comment

Face-off: Mobile VPNs vs SSL VPNsBy Convergence on November 27, 2006, 9:45 amTom Johnston of Netmotion Wireless argues users need mobile VPNs. Hitesh Sheth of Juniper argues SSL VPNs can cover mobile applications. Read their opening statements,...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed