tgreene
Executive Editor

IPSec vs. SSL: Which is the best choice for you?

Opinion
Mar 25, 20042 mins

* What is the difference between IPSec VPN and SSL remote access?

One of the most common questions readers ask is for a way to compare the benefits of IPSec VPNs vs. Secure Sockets Layer remote access. What they’re really asking is, “Which one is right for me?”  Here’s an answer and some resources they might tap.

One difference between the technologies is that IPSec operates at the network layer, so an IPSec tunnel allows the same access a user would have if they were plugged into the LAN. SSL remote access operates at the application layer, and proxies to Web-based network resources. It can also Webbify non-Web applications so they can be proxied. Some of the equipment sends down Java or Active X agents to intercept and tunnel session requests for non-Web applications.

IPSec requires a full client on the remote computer. SSL uses the SSL capabilities of the Web browser so virtually any Internet connected machine can access corporate resources.

Just these few differences can help sort out which technology is right for individual users. SSL remote access is sufficient for a user who wants to access just e-mail and doesn’t have a corporate issued machine. A user tapped into the corporate network who needs access to legacy applications for long periods wants to use IPSec.

IT executives looking to satisfy user demand for remote access but reluctant or unable to handle the support IPSec requires might opt for SSL, which on the whole is lower maintenance than IPSec. Analysts report that SSL remote access is also less expensive than IPSec used for remote access.

There are plenty more details to follow up on. See the links below for some resources to help you do that.