Questions tagged [ipsec]
Internet Protocol Security (IPsec) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec also includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session.
23
questions
35
votes
6
answers
70k
views
Are there any reasons for using SSL over IPSec?
is it recommended to use both protocols together? In which situation?
- 643
21
votes
3
answers
23k
views
What is the difference between SSH and IPsec?
There seems to be similar encryption going into both. They both use asymmetric (RSA, elliptic curves, etc) for the initial key exchange, then go to some symmetric (AES, Blowfish, etc) protocol. I'm ...
- 421
69
votes
8
answers
139k
views
What is the difference in security between a VPN- and a SSL-connection?
I would like to design a client-server application where the server is placed on Internet. I assume that I could set up the client-server connection using VPN (is it using IPSec?) or using a SSL ...
- 5,163
18
votes
2
answers
28k
views
Which is better for server-to-server-communication: IPSec or TLS?
Maybe you could help me with a small problem.
Would you recommend IPSec or TLS for a Server-to-Server-Connection? I need two or three arguments for reasoning a decision within my final paper, but ...
- 183
4
votes
4
answers
667
views
How can a network be secured against attacks coming from the inside?
(updated to (hopefully) be less broad)
No matter how well one secures a network there's always the chance of an attacker gaining access. In a shared home + home office network (eg. for a remote ...
- 443
15
votes
1
answer
3k
views
What's are the advantages of L2TP/IPSEC over plain IPSEC?
As the title says, my firewall (Sonicwall) can do either IPSEC or L2TP/IPSEC for VPN connections. One advantage of L2TP/IPSEC I can see is that the client computer get allocated its own IP address on ...
- 407
15
votes
5
answers
911
views
What is the potential impact of the alleged OpenBSD IPSEC attack?
Recently there is a bit of concern over encryption back doors in IPsec and while the status of this has not been confirmed, I don't know what impact something like this might have.
For instance, does ...
- 5,234
12
votes
3
answers
35k
views
When do I use IPsec tunnel mode or transport mode?
I basically understand how tunnel mode and transport mode works, but I don't know when I should use one instead of another.
Among the two parties who want to communicate, if one computer B doesn't ...
- 307
2
votes
1
answer
234
views
IPsec with PSK: Can PSK be used for passive eavesdroping?
I use a PSK to connect to an IPsec VPN.
Let's say an attacker can gain access to my PSK.
He can then impersonate me, that much is clear.
But would she also be able to decrypt intercepted traffic? ...
- 1,111
25
votes
4
answers
4k
views
IPsec (Internet Protocol Security) facts
Internet Protocol Security (IPsec) is a successor of the ISO standard Network Layer Security Protocol (NLSP). What are the advantages, disadvantages, other interesting facts regarding the protocol?
- 3,301
11
votes
2
answers
25k
views
Ipsec Native VPN on Windows 8 or 10
I have a Cisco PIX, and have been using the Cisco VPN client on windows however I would like to enable this to work with the native Windows 8/10 VPN client. It works fine with the native clients for ...
- 251
11
votes
1
answer
6k
views
How secure is L2TP+IPSEC?
I understand PPTP is widely used still, but insecure. A convenient alternative is: L2TP+IPSEC.
How secure is it?
What steps in the server setup can I take to maintain a high degree of compatibility ...
- 213
10
votes
7
answers
4k
views
How can I restrict access to network data by an unauthorized computer that connects via Ethernet?
I assume I can configure most routers to only assign IP addresses to specific MAC addresses, as is possible with wireless routers.
However what if a computer is connected via Ethernet and does not ...
- 101
9
votes
2
answers
2k
views
Does DNSSec have any benefit if used with IPSec-enabled IPv6?
I'm not sure if the RFC's support a IPSec-only implementation of DNS, but if it does, what does that mean for DNSSec?
Is DNSSec an IPv4-only technology?
- 50.5k
6
votes
5
answers
1k
views
Does mixing different types of encryption make the connection more secure?
Like when I browse a website using SSL from my laptop that is connected to my router using WPA2. My router talks to my ISP using IPsec.
Is that more secure or do these types of encryption have ...
- 8,793
5
votes
3
answers
389
views
How can an outsider tap into communications between two physical sites?
When referring to 'Sites' - I am not talking about a website, but of a physical place where a company resides. Today, to secure communications between two sites - Let's say between an office in London,...
- 1,550
5
votes
1
answer
513
views
Does IPSec authenticate identity?
I know that SSL/TLS authenticates the identity of a server (and/or client) by presenting a certificate which the client sends to a CA to check the validity. This happens before the SSL/TLS connection ...
- 61
4
votes
1
answer
569
views
IPsec: Is AH in tunnel mode secure?
I have a site-to-site IPsec VPN which was performing poorly (10 -20% upload/download speeds as a percentage of available WAN circuit bandwidth) when using ESP in tunnel mode with DES encryption and ...
- 184
4
votes
2
answers
254
views
IPSEC connection attempt to rogue server -- is my PSK compromised?
I am setting up an IPSec connection between two sites using Ubiquiti EdgeOS-based equipment. Using a DDNS service (a static IP is unavailable from the ISP), they can be found at east.example.net and ...
- 395
4
votes
1
answer
4k
views
what is a security association and how does it relate to ipsec?
I am learning IPSec. My class notes define a security association as a one way relationship between sender and receiver that (1) affords security for traffic flow and (2) is identified by the ...
- 1,457
1
vote
4
answers
1k
views
Which of the TLS/SSL and IPsec protocols is effective?
Which of those two protocols is the most effective for sending data from a client to a server on a local network (knowing that I aim to use it for FTP traffic)?
- 11
1
vote
2
answers
993
views
TLS or IPsec protocol for client-server communication? [duplicate]
What is the best protocol for client-server communication? TLS or IPsec? I have a public channel where users communicate with each other using a digital certificate like X.509.
- 329
0
votes
3
answers
224
views
What organisation(s) is able to recommend a baseline technology set for safe, secure, web browsing?
This is a high level question regarding some recent posts about enhancing web browser security from an end-user perspective.
What business/organisation(s) would have:
Sufficient technical skill to ...
- 50.5k