What are the things which can be done with SSL VPN which cannot be achieved with IPSec VPN? What are the reasons to opt for SSL VPN instead of IPSec VPN?
Tag: IPsec
What are the changes in PKI when i move from TLS protocol to IPSec Protocol?
Currently i am using TLS protocol for a secure communication between my server and client. I use PKI for key/certificate Management. If i want to switch to IPsec for secure communication, how will the PKI be affected or what changes should i do?
Tunnel and Transport Mode in IPSec, is it possible to combine them?
I’ve been wondering between two cases,
1 – tunnel from A to C and a tunnel from B to D, would it be possible to send a packet for A to D?
2 – Transport from A to D, and let’s say tunnel from B to D
Would it be possible to send a packet in any of these cases?
I assume for case 1 it wouldn’t be possible because of SA, and decryption would get messy But for the second case, I mean, that does sounds logical to me..
Could you share your thought?
Tools to learn IPSEC VPN
0
I would like to set up IPSEC Environments similar to the cloud deployment model. Is there any software free to download to test the VPN by virtually setting up the network/ any other means to learn the software.
Setting up IPSec on SharePoint
To activate IPSec on SharePoint I have read that a PKI is necessary. Is it really true? If yes why? And if no? What other options do I need have?
How to share IPSec VPN connection to eth1 or wlan0?
I have configured ikev2 VPN client on my Ubuntu machine. How can I share VPN connection via second Ethernet port?
Ubuntu server used as ipsec vpn router
Could you please help me to configure simple ubuntu router?
I have configured very simple 2 port ubuntu router, 1 wan and 1 lan port. source How To: Build a Simple Router with Ubuntu Server 18.04.1 LTS (Bionic Beaver) by Blaz Valentinuzzi.
I also setup VPN server using IKEv2-setup guide, source Set up Ubuntu Server 18.04 as an IKEv2 VPN server by George MacKerron.
Could some one help me to get it working?
VPN and IPsec devices
Hello,
Looking for opinions from anyone running fairly large scale networks at their datacenters. We are looking to update some topologie… | Read the rest of http://www.webhostingtalk.com/showthread.php?t=1774863&goto=newpost
Looking for opinions from anyone running fairly large scale networks at their datacenters. We are looking to update some topologie… | Read the rest of http://www.webhostingtalk.com/showthread.php?t=1774863&goto=newpost
Secure ways to share IPsec Pre-Shared Keys
I’m looking to setup a Site to Site IPsec VPN with a 3rd party and require to give a pre-shared key with the 3rd party for authentication as described here.
It mentions you should share this key over Phone/Fax/SMS rather than over the internet. The benefit I can see of over the phone is that once shared and configured there is no audit trail or copy of this key. If there are any issues we simply generate a new key and configure on the other end.
Would it be safer and more secure to share this pre-shared key over the phone or via PGP Email? Are the risks associated with “tapping the phone line” negligible in this instance?
Could IPSec flows be decrypted using PSK [duplicate]
This question already has an answer here:
- IPsec with PSK: Can PSK be used for passive eavesdroping? 1 answer
I created an IPSec tunnel between two VMs using StrongSwan. It relies on a Pre-Shared Key. I wonder, if this key is leaked, what could an attacker perform? Would he/she be able to decrypt previous exchanges? Could he/she perform a MITM without be detected? And more generally, what is the impact?
Some details:
- Mode Tunnel
- auth-trunc hmac(sha256)
- enc cbc(aes)
