Newsgroup: it.comp.sicurezza.crittografia
Titolo: Meglio VPN Ipsec o VPN SSL

Ciao!
mi hanno proposto 2 tipi di VPN, la SSL o la IPSec per la mia rete 
aziendale.
Mi potete spiegare le differenze?
E quale è più sicura?
Materiali da leggere?
GRAZIE MILLE!!!! 

There is a book that discusses this in detail:
http://www.packtpub.com/book/SSL_VPN
Book Information
Virtual Private Networks (VPNs) provide remote workers with secure
access to their company network via the internet by encrypting all data
sent between the company network and the user?s machine (the client).
Before SSL VPN this typically required the client machine to have
special software installed, or at least be specially configured for the
purpose.
Clientless SSL VPNs avoid the need for client machines to be specially
configured. Any computer with a Web browser can access SSL VPN systems.
This has several benefits:
Low admin costs, no remote configuration
Users can safely access the company network from any machine, be that a
public workstation, a palmtop or mobile phone
By pass ISP restrictions on custom VPNs by using standard technologies
SSL VPN is usually provided by a hardware appliance that forms part of
the company network. These appliances act as gateways, providing
internal services such as file shares, email servers, and applications
in a web based format encrypted using SSL. Existing players and new
entrants, such as Nokia, Netilla, Symantec, Whale Communications, and
NetScreen technologies, are rushing our SSL VPN products to meet
growing demand.
This book provides a detailed technical and business introduction to
SSL VPN. It explains how SSL VPN devices work along with their benefits
and pitfalls. As well as covering SSL VPN technologies, the book also
looks at how to authenticate and educate users ? a vital element in
ensuring that the security of remote locations is not compromised. The
book also looks at strategies for making legacy applications accessible
via the SSL VPN.
What you will learn from this book How SSL VPN technology works, and
how it fits into existing network architectures
Evaluating SSL VPN for your organization
Understand what to look out for when talking to vendors
How to plan an SSL VPN implementation for your business
Educate staff to maintain SSL VPN security
Strategies for providing access to internal legacy applications via SSL
VPN
A heads-up on likely trends and possibilities for the future of SSL VPN
Approach
The book blends technically rigorous descriptions with a friendly
approach based on practical examples and scenarios. The authors write
in clear, informal language and make extensive use of diagrams and
images. The book begins with an overview of SSL VPN?s purpose, and the
technical and business trends that are making it popular today. It then
looks at how SSL VPNs work and how they fit into existing network
plans. The effect of SSL VPN on the wider business environment is then
considered, before looking at how SSL VPN technology is likely to
develop in the future.
Who this book is written for This book aimed at IT network
professionals and managers who are currently evaluating SSL VPN
technologies. It requires a broad understanding of networking concepts,
but does not require specific and detailed technical knowledge of
protocols or vendor implementations.
Table of Contents
--------------------------------------------------------------------------------
Author(s)
Joseph Steinberg
Joseph Steinberg is CEO of Green Armor Solutions (
http://www.greenarmor.com
 ), an information-systems security product
vendor specializing in technology that combats phishing, pharming, and
online fraud. Prior to joining Green Armor, he spent more than four
years with Whale Communications, one of the pioneers of SSL VPN
technology. Earlier, he served in senior-management capacities at
several product vendors and consulting firms, and worked in technical
positions at Citibank and AT&T.
Mr. Steinberg's May 2003 article "SSL VPN Security" introduced an
awareness of critical security issues created by SSL VPN technology;
since its publication, nearly every SSL VPN vendor has acted upon the
concerns and recommendations made in the article.
Mr. Steinberg earned an M.S. in Computer Science from NYU, and holds a
CISSP (Certified Information Systems Security Professional) credential
as well as advanced certifications in IT security management (ISSMP)
and architecture (ISSAP). He has lectured on topics related to IT
Security and Management and is the author of numerous articles in
various journals, magazines, and other publications. A recognized
expert on IT security, he is also interviewed on a regular basis by
media personalities and sits on panels discussing IT-security related
matters.
Mr. Steinberg lives in the suburbs of New York City with his wife and
two daughters.
Tim Speed
Timothy Speed is an IBM ( 
http://www.ibm.com
 ) Certified IT Architect
working for the IBM Lotus Brand (ISSL). Tim has been involved in
Internet and messaging security since 1992. He also participated with
the Domino infrastructure team at the Nagano Olympics and with the
Lotus Notes systems for the Sydney Olympics. His certifications include
CISSP, MCSE, A+ Plus Security from CompTIA, Lotus Domino CLP Principal
Administrator, and Lotus Domino CLP Principal Developer. (Notes/Domino
certifications in R3, R4, R5, and ND6)
Tim has also co-authored four books:
The Internet Security Guidebook, ISBN: 0122374711, February, 2001.
The Personal Internet Security Guidebook, ISBN: 0126565619, October,
2001
Enterprise Directory and Security Implementation Guide: Designing and
Implementing Directories in Your Organization, ISBN:0121604527
Internet Security: A Jumpstart for Systems Administrators and IT
Managers, ISBN 1555582982.
 
Also see: 
http://sslvpnbook.packtpub.com/