Security at Network Layer
Advantages
- overhead for key negotiation is much less because multiple transport protocols and applications can share the same key management infrastructure
- fewer applications need to be changed
- allows the network to build VPNs and intranets
Disadvantages
- difficult to handle non-repudiation of data
- difficult to exercise control over multi-user machines
IPSec provides security at the network layer