weaknesses of ipsec protocol

[v_bhatia1976]

Hi,

Can you please guide or refer me about the shortcomings of IPSec protocol?

I just could not figure it out.

Vin

[b.speltz]

Compared to what? Currently IPSec and SSL are the two most widely used VPN technologies. IPSec is mostly used by enterprise to connect remote offices, branch officies, remote access users etc. over the VPN tunnel over Internet. On the other hand, SSL is used mostly by the web commerce applications over the Internet.

As of my understanding, I can say that SSL may be quick in establishing tunnels compared to IPSec and also the overheads in SSL may be less compared to IPSec.

[dhucaby]

I think IPsec in infinitely more configurable than SSL though. This comes into play when you need to define a specific security policy for clients or peers connecting to your network. For example, with IPsec, you can accept connections only from peers that can use a certain encryption or data integrity algorithm.

Also, IPsec seems to be more robust when it comes to client or peer authentication.

Naturally, when a feature is more robust or flexible, it is usually more complicated to configure and troubleshoot.