资源描述:
《ssl vpn与ipsec vpn优劣势的比较》由会员上传分享,免费在线阅读,更多相关内容在工程资料-天天文库。
1、SSLVPN与IPSecVPN优劣势的比较SSLVPNSSLVPNSSLVPNSSLVPNandandandandIPSecVPNIPSecVPNIPSecVPNIPSecVPNcomparisonoftheadvantagesanddisadvantagesinthecomparisonoftheadvantagesanddisadvantagesofcomparisonoftheadvantagesanddisadvantagesofcomparisonoftheadvantagesanddisadvantagesFirstistorev
2、iewthetraditionalIPSecVPNsolutions.IPSecEnglishfullnameis"InternetProtocolSecurity",theChinesecalled"InternetSecurityagreement",thebasiccryptographicProtocolSecurityProtocolisaVPN,itthroughthepublicnetworkforthedata(suchastheInternet)toprovideSecurityfortransmissioninthenet
3、worklayer.InordertoestablishanIPSecchannel,thecommunicationwillbeestablishedinacertainway.BecausetheIPSecprotocolsupportseveraloperatingmodes,sothecommunicationtodeterminethefirsttoadoptsecuritypoliciesandusagepatterns,thisincludestypessuchasencryptionalgorithmandidentityau
4、thenticationmethod,etc.IntheIPSecprotocol,oncetheIPSecchannelsetup,allonthenetworklayerprotocolincommunicationbothencrypted,suchasSNMP,HTTP,TCP,UDP,POP,AIMandKaZaa,regardlessofthechannelsecurityandencryptionmethodshowtobuild.1.IPSec1.IPSec1.IPSec1.InsufficientIPSecismainone
5、ofthemainthemaindeficiency(1)ofthelackofthemainsafetyperformanceishigh,butthecommunicationperformanceislowBecausetheIPSecsecurityprotocolsareworkinginthenetworklayer,notonlyallthenetworkchannelisencrypted,andwhentheuseraccesstoallthecompanyresources,likethelinewaydirectlyph
6、ysicalconnectiontothecorporatenetwork.Ordon'twanttoletyourpartnerorremoteemployeestobepartofyournetworkIPSecmakeyouarecommunicationthatnotonlyaverysmallpartofthechannelencryption,butforallchannelsisencrypted.SointhesecurityisbetterthantheSSLVPN,buttheoverallcommunicationper
7、formanceforsecurityhavebeenaffected,butsafetyisalwayshigherthanthatofperformance,itisalsotheIPSecVPNstilloneofthereasonsforthemainstream.(2)theneedintheIPSecVPNclientsoftwareoneachclientinstallationspecialusetheclientsoftware,usethesesoftwaretoreplaceoraddcustomersystemofTC
8、P/IPstack.Inmanysystems,whichcouldbringthesoftwarecompatibilityproblembetweenriskw