We are thinking of implementing Mutual SSL combined with IP Filtering because we are unable to setup a vpn within our external client. What are the risks associated with using Mutual SSL combined with IP Filtering?
Some possible concerns:
- Is it vulnerable to ip spoofing?
- Could less secure encryption mechanisms invalidate this setup?