資源描述:
《ssl vpn與ipsec vpn優(yōu)劣勢的比較》由會員上傳分享,免費(fèi)在線閱讀,更多相關(guān)內(nèi)容在工程資料-天天文庫。
1、SSLVPN與IPSecVPN優(yōu)劣勢的比較SSLVPNSSLVPNSSLVPNSSLVPNandandandandIPSecVPNIPSecVPNIPSecVPNIPSecVPNcomparisonoftheadvantagesanddisadvantagesinthecomparisonoftheadvantagesanddisadvantagesofcomparisonoftheadvantagesanddisadvantagesofcomparisonoftheadvantagesanddisadvantagesFirstistorev
2、iewthetraditionalIPSecVPNsolutions.IPSecEnglishfullnameis"InternetProtocolSecurity",theChinesecalled"InternetSecurityagreement",thebasiccryptographicProtocolSecurityProtocolisaVPN,itthroughthepublicnetworkforthedata(suchastheInternet)toprovideSecurityfortransmissioninthenet
3、worklayer.InordertoestablishanIPSecchannel,thecommunicationwillbeestablishedinacertainway.BecausetheIPSecprotocolsupportseveraloperatingmodes,sothecommunicationtodeterminethefirsttoadoptsecuritypoliciesandusagepatterns,thisincludestypessuchasencryptionalgorithmandidentityau
4、thenticationmethod,etc.IntheIPSecprotocol,oncetheIPSecchannelsetup,allonthenetworklayerprotocolincommunicationbothencrypted,suchasSNMP,HTTP,TCP,UDP,POP,AIMandKaZaa,regardlessofthechannelsecurityandencryptionmethodshowtobuild.1.IPSec1.IPSec1.IPSec1.InsufficientIPSecismainone
5、ofthemainthemaindeficiency(1)ofthelackofthemainsafetyperformanceishigh,butthecommunicationperformanceislowBecausetheIPSecsecurityprotocolsareworkinginthenetworklayer,notonlyallthenetworkchannelisencrypted,andwhentheuseraccesstoallthecompanyresources,likethelinewaydirectlyph
6、ysicalconnectiontothecorporatenetwork.Ordon'twanttoletyourpartnerorremoteemployeestobepartofyournetworkIPSecmakeyouarecommunicationthatnotonlyaverysmallpartofthechannelencryption,butforallchannelsisencrypted.SointhesecurityisbetterthantheSSLVPN,buttheoverallcommunicationper
7、formanceforsecurityhavebeenaffected,butsafetyisalwayshigherthanthatofperformance,itisalsotheIPSecVPNstilloneofthereasonsforthemainstream.(2)theneedintheIPSecVPNclientsoftwareoneachclientinstallationspecialusetheclientsoftware,usethesesoftwaretoreplaceoraddcustomersystemofTC
8、P/IPstack.Inmanysystems,whichcouldbringthesoftwarecompatibilityproblembetweenriskw