which way is more secured?

[John]

Hi all,

We have extranet set up to allow clients to retrieve
their files from my company. We try to decide whether
we should use DMZ (put the web server in DMZ and buy the
certificate to allow SSL connection or VPN over SSL to
allow the external clients to connect? Which one you recommend?

Thank you!

 

[jwgoerlich@gmail.com]

VPN over SSL is more secure than HTTP over SSL. It is more management,
too, of course. Definitely put the device in a screened subnet (DMZ).

J Wolfgang Goerlich

On Nov 1, 2:08 pm, John <J...@discussions.microsoft.com> wrote:
> Hi all,
>
> We have extranet set up to allow clients to retrieve
> their files from my company. We try to decide whether
> we should use DMZ (put the web server in DMZ and buy the
> certificate to allow SSL connection or VPN over SSL to
> allow the external clients to connect? Which one you recommend?
>
> Thank you!

 

[John]

Thanks for your reply.
> VPN over SSL is more secure than HTTP over SSL
due to my limited knowledge, can you explain why VPN over SSL is more secure
than HTTP over SSL?

"jwgoerlich@gmail.com" wrote:

> VPN over SSL is more secure than HTTP over SSL. It is more management,
> too, of course. Definitely put the device in a screened subnet (DMZ).
>
> J Wolfgang Goerlich
>
> On Nov 1, 2:08 pm, John <J...@discussions.microsoft.com> wrote:
> > Hi all,
> >
> > We have extranet set up to allow clients to retrieve
> > their files from my company. We try to decide whether
> > we should use DMZ (put the web server in DMZ and buy the
> > certificate to allow SSL connection or VPN over SSL to
> > allow the external clients to connect? Which one you recommend?
> >
> > Thank you!
>
>
>

 

[jwgoerlich@gmail.com]

HTTP over SSL encrypts client-server information only. This means that
the URL and any Form method=get requests will be in the clear. Also,
anything outside HTTP -- such as FTP, perhaps -- would be unprotected.

A VPN keeps all application and session information confidential.

J Wolfgang Goerlich


On Nov 1, 2:29 pm, John <J...@discussions.microsoft.com> wrote:
> Thanks for your reply.> VPN over SSL is more secure than HTTP over SSL
>
> due to my limited knowledge, can you explain why VPN over SSL is more secure
> than HTTP over SSL?
>
>
>
> "jwgoerl...@gmail.com" wrote:
> > VPN over SSL is more secure than HTTP over SSL. It is more management,
> > too, of course. Definitely put the device in a screened subnet (DMZ).
>
> > J Wolfgang Goerlich
>
> > On Nov 1, 2:08 pm, John <J...@discussions.microsoft.com> wrote:
> > > Hi all,
>
> > > We have extranet set up to allow clients to retrieve
> > > their files from my company. We try to decide whether
> > > we should use DMZ (put the web server in DMZ and buy the
> > > certificate to allow SSL connection or VPN over SSL to
> > > allow the external clients to connect? Which one you recommend?
>
> > > Thank you!- Hide quoted text -
>
> - Show quoted text -

 

[Roger Abell [MVP]]

"John" <John@discussions.microsoft.com> wrote in message
news:0CB231F4-55AE-47D8-A8B7-4016284BE664@microsoft.com...
> Hi all,
>
> We have extranet set up to allow clients to retrieve
> their files from my company. We try to decide whether
> we should use DMZ (put the web server in DMZ and buy the
> certificate to allow SSL connection or VPN over SSL to
> allow the external clients to connect? Which one you recommend?
>

"allow the external clients to connect" to what ?
What is it that you are most wanting to secure? The files served
to the external clients and its webserver, or the "to what" ?
If the "to what" is a screened network, not outside, but not
your internal network, then perhaps that is better.