101 · Question #681
in which scenario would an SSL VPN solution have an advantage over an IPSec VPN?
The correct answer is C. when users work remotely. SSL VPN tunnels traffic over HTTPS port 443, which is almost universally permitted through firewalls, giving it a practical advantage for remote workers connecting from public or restricted networks.
Question
in which scenario would an SSL VPN solution have an advantage over an IPSec VPN?
Options
- Awhen users are unable to install software on their PC
- Bwhen users require a secure connection to the corporate network
- Cwhen users work remotely
- Dwhen users require the ability to RDP to internal resources
How the community answered
(31 responses)- A6% (2)
- C90% (28)
- D3% (1)
Why each option
SSL VPN tunnels traffic over HTTPS port 443, which is almost universally permitted through firewalls, giving it a practical advantage for remote workers connecting from public or restricted networks.
While clientless browser-based SSL VPN access is a feature of some implementations, modern IPSec solutions such as Cisco AnyConnect also offer lightweight clients, so this is not a clear differentiating advantage of SSL VPN over IPSec.
Both SSL VPN and IPSec VPN provide strong encrypted tunnels to the corporate network; a secure connection is not a scenario that favors one technology over the other.
When users work remotely from hotels, airports, or other public locations, SSL VPN has an advantage because it operates over port 443 (HTTPS), which is rarely blocked by local firewalls or NAT devices. IPSec relies on ESP and IKE using UDP ports 500 and 4500, which are frequently filtered by restrictive public network firewalls, making SSL VPN the more reliable choice for remote connectivity.
RDP to internal resources is a use case supported equally by both SSL VPN and IPSec VPN tunnels; neither protocol provides an inherent advantage for RDP traffic specifically.
Concept tested: SSL VPN vs IPSec VPN remote access advantages
Source: https://www.cisco.com/c/en/us/products/security/anyconnect-secure-mobility-client/index.html
Topics
Community Discussion
No community discussion yet for this question.