Secure Sockets Layer (SSL) Virtual Private Networks (VPNs) are quickly gaining popularity as serious contenders in the remote-access marketplace. Analysts predict that products based on SSL VPN technology will rival – or even replace – IP Security Protocol (IPSec) VPNs as remote–access solutions. A number of factors are fueling the dramatic demand for SSL VPNs, including:
- Government mandates – such as the Health Insurance Portability and Accountability Act (HIPAA) in the United States – that are driving key industry segments to protect the privacy of distributed electronic information.
- The increasing use of extranets – the granting of non-employees and business partners secure access to internal networks – which have become a “must have” requirement of conducting business.
- Increased demand by employees for flexible working options that enable home working – a trend fueled by governmental regulations such as the Flexible Working Act in Great Britain that require employers to make reasonable accommodations for working parents of young children.
Traditional Solutions Fall Short
Until recently, VPNs based on the IPSec protocol have been seen as the logical choice for providing secure network connectivity beyond the firewall. IPSec VPNs leverage the Internet as an “always on,” ubiquitous data-transfer bridge, eliminating “private” network access costs, such as leased lines, Asynchronous Transfer Mode (ATM), or frame relay. IPSec VPNs offer a less-expensive alternative to dedicated networks, and have proven well suited for secure, on-demand point-to-point connectivity over the Internet.
However, remote-access IPSec VPNs bring security at a high price. Distributing IPSec clients to remote machines and configuring them for access is challenging, especially when the Information Technology (IT) department does not have easy access to remote computers. Further, because they operate at the network level, IPSec VPNs effectively provide the remote personal computer (PC) with full network visibility, as if it were a computer located on the corporate Local Area Network (LAN). Policy enforcement and security controls cannot be easily applied in this model. For these reasons, remote-access IPSec VPNs typically result in a high total cost of ownership (TCO), especially when compared to SSL VPNs.
SSL VPNs: Application Gateways for the Enterprise
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.