IPsec VPN - MKosian N01279907

Matsvei Kosian

IPsec VPN

A protocol that established a virtual private network connection.

What is IPsec VPN?

IPsec VPN uses internet connectivity to connect multiple sites on the same private network, where the internet connectivity operates as the communication network. IPsec VPN topology can be point to point, multi-point or mesh. The speed of data transfer varies heavily depending on internet traffic and congestion. IPsec VPN operates on layer 3 of the OSI model and uses IP technology. .

How Does it Operate?

To ensure secure connections over the public internet, IPsec VPN creates a “tunnel” between sites on the virtual WAN. This IP Security (IPsec) tunnel ensures safe data transfer between participants on either side of the tunnel. Typically, this sort of VPN will be found between an appliance’s firewall and a secure route that is provided between multiple sites. This makes it easy for LAN sites to connect to each other over the VPN, as additional software is not needed on the appliances, other than the VPN software itself. Devices within the configured WAN can communicate securely with each other in the public domain by using the secure tunnels.

Image taken from https://www.tp-link.com/us/support/faq/2163/

Advantages

Disadvantages

• Low cost
• Uses existing internet connections for data communication
• Easy to setup using VPN software

• Potential low QoS as internet traffic can slow data transfer speeds
• Potential network downtime if only a single internet connection is used with no backup

Costs

OTHER

The costs for an IPsec VPN depend on many factors as there are many different providers. Companies such as Cisco and Microsoft offer secure tunneling services for businesses. Relatively speaking, IPsec VPNs are cheaper and easier to setup than other WAN solutions, as only software can be used and there is no need to purchase additional hardware. However, many IPsec VPN charge a price per hour or other period of time, so eventually the price may grow to be greater than a fixed price solution.

• Typically good for companies with low budgets
• Good for companies with many remote users, as the internet is widely accessible
• Goof for basic WAN setupus

Case Study: Microsoft

Name of Service Provider and Client Organization: Microsoft is both provider and client.Sector: Computer technology, cloud computingChallenges Faced: Employees working from home due to COVID-19How Did Upgrading Address Challenge: Allowed employees to access information securely from home

With 151,000 employees, Microsoft had to come up with a unique solution to deal with working from home. The solution ended up being introducing split tunneling into their VPN ecosystem. This meant that non-corporate activity, Microsoft Teams meetings and other non-vital workflow components were sent to the internet while important things were connected to an internal company VPN.

Using Microsoft Azure and Office 365 made this solution even easier, as all of Microsoft's data is in the cloud. Microsoft reports that employees have been able to keep up their productivity due to the use of split tunneling.