What is ipsec?

What does IPsec protect against?

Security is a key factor to consider when implementing remote access. The more outside connections there are to a network, the more opportunities arise for nefarious parties to intercept data being transmitted. That’s why IPsec protocols use encryption. IPsec encryption works by scrambling data in transit so it cannot be deciphered if intercepted. Data can only be read if the user has the correct key to mathematically unscramble it. VPNs also mask a user’s Internet Protocol (IP) address for further security. The VPN assigns a new IP address, hiding the user’s original address and making it harder for an internet service provider to track them.
VPN access is protected by a password. It’s essential for users to select strong passwords with combinations of letters and numbers, upper- and lowercase, special characters, and no dictionary words. The most locked-down systems won’t let users choose a weak password. Two-factor authentication (2FA) makes VPNs even more secure. This method requires a one-time code—sent via text message or generated by a mobile app—in addition to the password to log in. Even if a hacker discovers the password, he or she won’t be able to access the VPN without the second code.
Yet IPsec has additional security advantages besides encryption. Since it requires special client software, it is more difficult to break into. Potential hackers would need to know the right software to use and configure it with the correct settings in order to access an IPsec VPN.
IPsec has two modes of securing data: transport and tunnel. In transport mode, only the payload of an IP packet (that is, the data itself) is encrypted; the header remains intact. In tunnel mode, on the other hand, the entire packet is encrypted and then encapsulated in a new IP packet with a new header. The choice of which mode to use is complicated. Tunnel mode is typically used between gateways whereas transport mode is used between end-stations. 

What is SSL?

Secure Sockets Layer (SSL) is IPsec’s major rival as a VPN protocol. Though its origins also trace to the 1990s, SSL is a more recent method for implementing VPNs, and it is becoming increasingly popular. The SSL protocol was replaced by a successor technology, Transport Layer Security (TLS), in 2015, but the terms are interchangeable in common parlance and “SSL” is still widely used.
SSL VPNs are implemented through the remote user’s web browser and do not require the installation of special software. All major web browsers—including Chrome, Firefox, Internet Explorer, and Safari—come with SSL support. This makes SSL easy to set up and use, especially when a team member is installing it without help from tech support.