Use of Preshared Secret vs Certificates

[S Ramakrishnan]

Hi -

Considering the two applications
of IPSec VPNs, viz.,
remote access and Intranet,
which mode of Phase I authentication
is more widely used?

My understanding is that remote access
applications cannot use preshared secrets
since their IP addresses are not known in
advance. Furthermore, it does not scale.

Is it also true that in most practical
deployments of Intranet VPNs (gateway
to gateway IPsec based), certs are
preferred to preshared secrets?

Thanks,

Rk


LYCOShop is now open. On your mark, get set, SHOP!!!
http://shop.lycos.com/

VPN is sponsored by SecurityFocus.COM