Comparing SSL and IPsec VPNs

IPsec-based VPNs are the deployment-proven, remote-access technology used by most organizations today. IPsec VPN connections are established using pre-installed VPN client software on the user desktop, thus focusing it primarily on company-managed desktops. IPsec-based remote access also offers tremendous versatility and customizability through modification of the VPN client software. Using APIs in IPsec client software, organizations can control the appearance and function of the VPN client for use in applications such as unattended kiosks, integration with other desktop applications, and other special use cases.

Both IPsec and SSL VPN technologies offer access to virtually any network application or resource. SSL VPNs offer additional features, such as easy connectivity from noncompany-managed desktops, little or no desktop software maintenance, and user-customized web portals upon login. Table 9-1 compares the two technologies.

Table 9-1 Comparing IPsec and SSL VPN Technologies