Wednesday, November 26, 2008

IPSec vs. TLS/SSL

IPSec - IPSeic is Security protocol, run at IP Layer, suit consist of Authentication Header (AH) and Encapsulation Security Payload (ESP). IPSec is common use with Site - to - Site configuration.

TLS/SSL - Transport Layer Secure, Socket Secure Layer, run at transport layer, application aware ssl support.

TLS/SSL has advantange than IPSec following topics below:
- Most application e.g. SIP Client, Web browser already supported TLS/SSL. It's easier than IPSec which require complexity Security Association configuration. Although, there is IPv6 , supported IPsec, but it's quite so long time that all users + applications will use IPv6 with IPSec.

- TLS/SSL doesn't have problem with NAT, but IPSec has.

- All ISPs (router) allow SSL port (e.g. 443 ) because there are lots of users use this port for doing the bank statements etc. , but some ISP don't allow for IPSec traffic unless you pay more for enterprise solution.

No comments: