We have several customers with the same service installed within their DMZ. This service is a HTTPS server. The server does not have authentication, this is solved by configuring the NetScaler firewall, configuring a forwarding rule to accept HTTPS on a endpoint (https://service.domain.com) and add Basic Autentication in NetScaler. After checking credentials NetScaler then forwards the request to the server hosting the service and returns.
Then we have this customer who want everything in tunnels. Our service connecting to the customer service is running in Azure Cloud and I'm struggling a bit with getting the logic up and running.
I know little about "vpn" (Policy Based IPSec) vs https+basic auth. But don't they operate on the same level on the OSI model - then security wise are no real benefits the one or the other solution?
The outcome is the same:
- they operates on the same level on the OSI model
- data is encrypted in both solutions
- there is access control in both solutions