Which VPN type is typically used for site-to-site connections at the network layer?

Which VPN type is typically used for site-to-site connections at the network layer?

• A. Both are equally used for site-to-site
• B. None
• C. IPsec VPN
• D. SSL/TLS VPN

Answer: (C)

IPsec VPN is designed to secure network-layer connections between two networks, typically gateways, over an untrusted network. It creates a tunnel at the IP level, encapsulating whole IP packets so traffic between the sites stays private and authenticated. For site-to-site deployments, tunnel mode is used, enabling entire subnets at each site to communicate as if directly connected, with encryption and integrity provided by IPsec (often via ESP). SSL/TLS VPNs, by contrast, operate at higher layers and are more common for remote-access scenarios where individual clients connect to a gateway to reach applications, not for typical network-to-network site-to-site tunnels. While SSL/TLS can be used in some site-to-site setups, IPsec is the standard for network-layer site-to-site connections.

IPsec VPN is designed to secure network-layer connections between two networks, typically gateways, over an untrusted network. It creates a tunnel at the IP level, encapsulating whole IP packets so traffic between the sites stays private and authenticated. For site-to-site deployments, tunnel mode is used, enabling entire subnets at each site to communicate as if directly connected, with encryption and integrity provided by IPsec (often via ESP). SSL/TLS VPNs, by contrast, operate at higher layers and are more common for remote-access scenarios where individual clients connect to a gateway to reach applications, not for typical network-to-network site-to-site tunnels. While SSL/TLS can be used in some site-to-site setups, IPsec is the standard for network-layer site-to-site connections.