The Norwegian National Cyber Security Centre (NCSC) recommends replacing SSLVPN/WebVPN solutions with alternatives due to the repeated exploitation of related vulnerabilities in edge network devices to breach corporate networks.

  • taladar
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    8 months ago

    On the other hand IPsec has no real way to negotiate crypto parameters so those stay whatever you initially set up forever, even if those algorithms have known exploits or become insecure in other ways. Also, there are incompatible vendor versions of IPsec too.