Darren Spruell wrote:
On 3/30/07, mail-lists <[EMAIL PROTECTED]> wrote:
> Openvpn....
Unless I'm mistaken Openvpn is not equal to Ipsec
Depends on what you mean by "equal to" - OpenVPN makes use of SSL/TLS
rather than the transport protocols IPsec employs, but they are of
similar equivalence in terms of security. OpenVPN does make use of
strong cryptographic primitives, and typically is considered easier to
set up than IPsec (although the newer ipsec.conf support in OpenBSD
seems to have turned the tables around on that one.)
I meant 'equal to' in the most superficial sense :). Ipsec is easy
enough to set up on the OpenBSD end (using ipsec.conf), but I haven't
been able to find an ipsec client that doesn't make you want to slit
your wrists in the windows world. I've tried greenbow? but there's no
way an end user could configure even that. Plus it's not 'free' software.
Anyways - I'm just slaking my own curiosity as to what solutions other
people have come up with. I haven't really visited this issue in awhile,
maybe I'll take another look at openVPN.
Thanks!
http://www.sans.org/reading_room/whitepapers/vpns/1459.php
DS
