#VISCOSITY VPN IS IT SSL OR IPSEC CODE#
#VISCOSITY VPN IS IT SSL OR IPSEC WINDOWS#

StrongSwan is the best free and open source IPsec implementation available on Linux, (much better than libreswan.), good documentation, use cases and examples etc, good quality of code (less bugs - that's what we've found running it in production for 2+ years with 500+ instances deployed) actively developed and maintained by a group of passionate developers that knows the stuff well. o_O Microsoft is notorious for getting it wrong. IPsec can, unfortunately, also be implemented to squawk at spurious connection attempts - but at least doesn't rely on the premise as much as things like OpenVPN and SSH do.ДЄnd for the record - you can tell someone who's dealt with IPsec extensively since they won't refer to it as IPSec.

I very much like the concept carry over that both IPsec and WireGuard can be silent actors within the network not giving away hosts as things like OpenVPN and SSH do. Hopefully, as mentioned amongst the comments, things like WireGuard will mature and become more mainstream. That being said I feel like IPsec has a badge it will never get rid of and people discard it before attempting implementation at this point. In static environments it's relatively painless once the learning curve is overcome. It's no more or less complicated than other implementation and is 'better' than TLS in it's own right with regard to things that could go wrong. StrongSwan isn't complex if you are well versed in IPsec implementation as a whole. I wonder if any of those bits flowed back upstream or if the bolt-on aspect kept that from happening. The relatable component was this was mainly done against StrongSwan implementations of the IKE daemon if I remember correctly (Linux, AIX and Solaris mainly).

While not a sales pitch, and in fact I don't think the product seems to have sold well anyway, it was very interesting to work with them on the test harness we built to validate correct IPsec operations, configuration, validation that data wasn't leaking outside of the SAs that were being provisioned, and performance via the translated policy. Centrify, having good hooks in to AD already, was chosen to build a product that did just the same thing in their nix environments by consuming IPsec configuration out of GPO.

#VISCOSITY VPN IS IT SSL OR IPSEC WINDOWS#

It's generally very easy to deploy IPsec policy in a Windows environment via GPO and the customer wanted that to flow down into their nix environments. I was the lead consultant on a project between a very large US retailer and Centrify to build a product called DirectSecure. Seeing all the complaints in here of how hard this is to setup brings back memories.

Viscosity vpn is it ssl or ipsec