Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

weaknesses of ipsec protocol


Can you please guide or refer me about the shortcomings of IPSec protocol?

I just could not figure it out.



Re: weaknesses of ipsec protocol

Compared to what? Currently IPSec and SSL are the two most widely used VPN technologies. IPSec is mostly used by enterprise to connect remote offices, branch officies, remote access users etc. over the VPN tunnel over Internet. On the other hand, SSL is used mostly by the web commerce applications over the Internet.

As of my understanding, I can say that SSL may be quick in establishing tunnels compared to IPSec and also the overheads in SSL may be less compared to IPSec.

New Member

Re: weaknesses of ipsec protocol

I think IPsec in infinitely more configurable than SSL though. This comes into play when you need to define a specific security policy for clients or peers connecting to your network. For example, with IPsec, you can accept connections only from peers that can use a certain encryption or data integrity algorithm.

Also, IPsec seems to be more robust when it comes to client or peer authentication.

Naturally, when a feature is more robust or flexible, it is usually more complicated to configure and troubleshoot.