OpenVPN vs. IPsec – Pros and cons, what to use?

I have all of the scenarios setup in my environment. (openvpn site-site, road warriors; cisco ipsec site-site, remote users)

By far the openvpn is faster. The openvpn software is less overhead on the remote users. The openvpn is/can be setup on port 80 with tcp so that it passes at places that have limited free internet. The openvpn is more stable.

Openvpn in my environment does not force policy to the end user. Openvpn key distribution is a little harder to do securely. Openvpn key passwords are up to the end users (they can have blank passwords). Openvpn is not approved by certain auditors (the ones that only read bad trade rags). Openvpn takes a little bit of brains to setup (unlike cisco).

This is my experience with openvpn: I know that most of my negatives can be alleviated through either configuration changes or process changes. So take all my negatives with a bit of skepticism.

Related Posts:

  1. How to redirect all HTTP requests to HTTPS
  2. What’s the best approach for generating a new API key?
  3. Simplest two-way encryption using PHP
  4. How does the SQL injection from the “Bobby Tables” XKCD comic work?
  5. how fix “this certificate cannot be verified up to a trusted certification authority”
  6. How can bcrypt have built-in salts?
  7. Getting a List of Currently Available Roles on a WordPress Site?
  8. What’s the easiest way to stop WP from ever logging me out
  9. Prevent access or auto-delete readme.html, license.txt, wp-config-sample.php
  10. How safe / sanitized is wp_insert_posts()?
  11. From a security standpoint, should bloginfo() or get_bloginfo() be escaped?
  12. Why are passwords exportable as plain text in WordPress?
  13. What’s the difference between esc_* functions?
  14. How to set up fail2ban with WordFence?
  15. Is there a way to force ssl on certain pages
  16. What is the purpose of having a token in cookies?
  17. How to remove “Connection Information” requirement on localhost install of WP on MACOSX
  18. How is password strength calculated?
  19. Regular security checks – what steps should be included?
  20. What are the pros and cons of using a custom front-end to retrieve content from a WordPress back-end
  21. WordPress “Site Health Status” trust it or myself for its security advice?
  22. Do Cookies Need to be Sanatized Before Being Saved?
  23. Is WP vulnerable when updating plugins or themes?
  24. Disable external access to REST API Endpoint
  25. What is the wp-includes/certificates/ca-bundle.crt used for?
  26. Do you need to escape hard coded plain text?
  27. Encrypt emails?
  28. Garbage in beginning of wp-config.php – was this WP installation compromised?
  29. WordPress salts set in config and database
  30. Disallow file edit not preventing plugin install
  31. How to secure WordPress XMLRPC?
  32. What is the relationship between cURL, WordPress and cacert.pem?
  33. How can I find security hole in my wordpress site?
  34. Does WP show me if I’m logged in from multiple locations?
  35. Is it necessary to use esc_url with template tags such as get_permalink?
  36. How to prevent bot or someone to modify any file automatically?
  37. HTTP Security Headers in wp-config
  38. WordPress Malware Problem help! [duplicate]
  39. Staging Site: Made Public – Security Questions
  40. Best Way to Enable Two Step Authentication
  41. Restrictive File Permissions
  42. Why are xmlrpc.php and wp-cron.php being called so often?
  43. Using esc_html with HTML purifier and CSSTidy: Overkill?
  44. wordfence scan warning on W3 Total Cache [closed]
  45. Securing a multi-user permission structure
  46. Is default functions like update_post_meta safe to use user inputs?
  47. No option “I would like my site to be private, visible only to users I choose” in Privacy Settings
  48. wp-config.php modified?
  49. Securing wp-config leads to sensitive information leak on wp-settings
  50. Suspicious Files
  51. What’s the point of forbidding access to wp-config.php?
  52. How to save iframe tag into a post?
  53. wp-json and what data does it give away?
  54. Is is necessary to use security plugin for wordpress? [closed]
  55. neccessary?
  56. my wordpress website is suspended [closed]
  57. Is wp_kses the right approach in sanitizing this string?
  58. iTheme Security always lockout my account [closed]
  59. Is it sensible to worry about sanitizing admin input in plugin custom CSS?
  60. Renaming install.php for security?
  61. WordPress Front end Form – Enable to Submit PHP Codes
  62. Is it safe use wp_editor in public contact form
  63. Which Versions of WordPress Ship with the Patched TimThumb?
  64. Use global variables or function that returns said variables for site-wide private-ish WP settings?
  65. How safe is current_user_can()?
  66. Is it safe to give wordpress directories ownership to www-data?
  67. Use Google authentication for pages within a website [closed]
  68. Do we need to escape data that we receive from theme options?
  69. Why does WordPress change a file’s permissions?
  70. Side effects of disallowing *.php requests in production environment?
  71. should I escape a literal url added in functions.php
  72. Outgoing new connection to linked Websites – why?
  73. My Site keeps crashing due to the wp-confg file being deleted
  74. Someone keeps changing my SITEURL (mysql injection or xss?) [closed]
  75. Moving wp-config.php outside root folder where we have multiple wordpress websites for enhanced security [duplicate]
  76. Replace domain in database
  77. Adding Security Keys?
  78. What highest security brake with wordpress and static files?
  79. Secret keys in SCM
  80. Spam in WordPress root folder
  81. Uploading attachment (pdf) and prevent download for anonymous user
  82. Specific Page/Post Need to Stay Non SSL
  83. Scan multiple websites for malware that are in same webhost root?
  84. Security: AWS (shared hosting) claims template file malicious
  85. Cannot access wp admin of WordPress website (security plugin issue) [closed]
  86. PHP Code Sniffer – WordPress VIP Coding Standards
  87. How do I hide WordPress users from security scanning?
  88. Background Updates Not Happening
  89. wp-config.php file and code injection
  90. Trying to understand nature of hacking
  91. FORCE_SSL_ADMIN affecting subdomains
  92. Is my WP site being hacked?
  93. Directory to store secure file
  94. checking the form submit in right order
  95. How can I give someone server access to only duplicate and modify a site?
  96. Our security auditor is an idiot. How do I give him the information he wants?
  97. I am under DDoS. What can I do?
  98. How can I implement ansible with per-host passwords, securely?
  99. Can you alter the default wordpress strong password requirements?
  100. how to sanitizing $_POST with the correct way?

Leave a Comment