Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [ipsec]

Internet Protocol Security (IPsec) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec also includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session.

Filter by
Sorted by
Tagged with
36 votes
6 answers
71k views

Are there any reasons for using SSL over IPSec?

is it recommended to use both protocols together? In which situation?
mcfan's user avatar
  • 663
22 votes
3 answers
25k views

What is the difference between SSH and IPsec?

There seems to be similar encryption going into both. They both use asymmetric (RSA, elliptic curves, etc) for the initial key exchange, then go to some symmetric (AES, Blowfish, etc) protocol. I'm ...
stackuser's user avatar
  • 431
69 votes
8 answers
141k views

What is the difference in security between a VPN- and a SSL-connection?

I would like to design a client-server application where the server is placed on Internet. I assume that I could set up the client-server connection using VPN (is it using IPSec?) or using a SSL ...
Jonas's user avatar
  • 5,203
18 votes
2 answers
29k views

Which is better for server-to-server-communication: IPSec or TLS?

Maybe you could help me with a small problem. Would you recommend IPSec or TLS for a Server-to-Server-Connection? I need two or three arguments for reasoning a decision within my final paper, but ...
Saturas's user avatar
  • 183
4 votes
4 answers
753 views

How can a network be secured against attacks coming from the inside?

(updated to (hopefully) be less broad) No matter how well one secures a network there's always the chance of an attacker gaining access. In a shared home + home office network (eg. for a remote ...
mayhewluke's user avatar
15 votes
1 answer
3k views

What's are the advantages of L2TP/IPSEC over plain IPSEC?

As the title says, my firewall (Sonicwall) can do either IPSEC or L2TP/IPSEC for VPN connections. One advantage of L2TP/IPSEC I can see is that the client computer get allocated its own IP address on ...
Simon Hodgson's user avatar
15 votes
5 answers
951 views

What is the potential impact of the alleged OpenBSD IPSEC attack?

Recently there is a bit of concern over encryption back doors in IPsec and while the status of this has not been confirmed, I don't know what impact something like this might have. For instance, does ...
Incognito's user avatar
  • 5,264
12 votes
3 answers
36k views

When do I use IPsec tunnel mode or transport mode?

I basically understand how tunnel mode and transport mode works, but I don't know when I should use one instead of another. Among the two parties who want to communicate, if one computer B doesn't ...
Gqqnbig's user avatar
  • 307
2 votes
1 answer
339 views

IPsec with PSK: Can PSK be used for passive eavesdroping?

I use a PSK to connect to an IPsec VPN. Let's say an attacker can gain access to my PSK. He can then impersonate me, that much is clear. But would she also be able to decrypt intercepted traffic? ...
manduca's user avatar
  • 1,111
26 votes
4 answers
4k views

IPsec (Internet Protocol Security) facts

Internet Protocol Security (IPsec) is a successor of the ISO standard Network Layer Security Protocol (NLSP). What are the advantages, disadvantages, other interesting facts regarding the protocol?
Eric Warriner's user avatar
11 votes
1 answer
7k views

How secure is L2TP+IPSEC?

I understand PPTP is widely used still, but insecure. A convenient alternative is: L2TP+IPSEC. How secure is it? What steps in the server setup can I take to maintain a high degree of compatibility ...
hookenz's user avatar
  • 213
11 votes
2 answers
25k views

Ipsec Native VPN on Windows 8 or 10

I have a Cisco PIX, and have been using the Cisco VPN client on windows however I would like to enable this to work with the native Windows 8/10 VPN client. It works fine with the native clients for ...
user2641043's user avatar
10 votes
7 answers
4k views

How can I restrict access to network data by an unauthorized computer that connects via Ethernet?

I assume I can configure most routers to only assign IP addresses to specific MAC addresses, as is possible with wireless routers. However what if a computer is connected via Ethernet and does not ...
Wholemilk's user avatar
  • 101
9 votes
2 answers
2k views

Does DNSSec have any benefit if used with IPSec-enabled IPv6?

I'm not sure if the RFC's support a IPSec-only implementation of DNS, but if it does, what does that mean for DNSSec? Is DNSSec an IPv4-only technology?
makerofthings7's user avatar
5 votes
1 answer
579 views

Does IPSec authenticate identity?

I know that SSL/TLS authenticates the identity of a server (and/or client) by presenting a certificate which the client sends to a CA to check the validity. This happens before the SSL/TLS connection ...
Soulrot's user avatar
  • 61
5 votes
5 answers
1k views

Does mixing different types of encryption make the connection more secure?

Like when I browse a website using SSL from my laptop that is connected to my router using WPA2. My router talks to my ISP using IPsec. Is that more secure or do these types of encryption have ...
Ulkoma's user avatar
  • 8,763
5 votes
3 answers
421 views

How can an outsider tap into communications between two physical sites?

When referring to 'Sites' - I am not talking about a website, but of a physical place where a company resides. Today, to secure communications between two sites - Let's say between an office in London,...
Franko's user avatar
  • 1,550
4 votes
2 answers
303 views

IPSEC connection attempt to rogue server -- is my PSK compromised?

I am setting up an IPSec connection between two sites using Ubiquiti EdgeOS-based equipment. Using a DDNS service (a static IP is unavailable from the ISP), they can be found at east.example.net and ...
Mooseman's user avatar
  • 415
4 votes
1 answer
4k views

what is a security association and how does it relate to ipsec?

I am learning IPSec. My class notes define a security association as a one way relationship between sender and receiver that (1) affords security for traffic flow and (2) is identified by the ...
bernie2436's user avatar
  • 1,457
4 votes
1 answer
616 views

IPsec: Is AH in tunnel mode secure?

I have a site-to-site IPsec VPN which was performing poorly (10 -20% upload/download speeds as a percentage of available WAN circuit bandwidth) when using ESP in tunnel mode with DES encryption and ...
Tedwin's user avatar
  • 184
1 vote
4 answers
1k views

Which of the TLS/SSL and IPsec protocols is effective?

Which of those two protocols is the most effective for sending data from a client to a server on a local network (knowing that I aim to use it for FTP traffic)?
No Name's user avatar
  • 11
1 vote
2 answers
1k views

TLS or IPsec protocol for client-server communication? [duplicate]

What is the best protocol for client-server communication? TLS or IPsec? I have a public channel where users communicate with each other using a digital certificate like X.509.
elli's user avatar
  • 339
0 votes
3 answers
243 views

What organisation(s) is able to recommend a baseline technology set for safe, secure, web browsing?

This is a high level question regarding some recent posts about enhancing web browser security from an end-user perspective. What business/organisation(s) would have: Sufficient technical skill to ...
makerofthings7's user avatar