We have cloud based digital platform at work and we have the ability to connect to our cloud based ERP system. The ERP provider has given 2 options to connect - 1) a connector which uses HTTPS or VPN.
I am trying to make a decision as to which is the most secure and easy to implement.
Both TLS connection and VPN provide a secure tunnel which is encrypted and everything traversing the tunnel is encrypted including authentication credentials.
I know with VPN, one can dictate encryption algorithms to be used. I believe with VPN option, their will be mutual authentication (i.e. certificate on VPN client and at the destination - VPN server). However with the TLS option we have username and password option for authentication or certificate based. I would choose the latter.
So what am i gaining with VPN that i do not gain with HTTPS (TLS)?