<story><title>Selecting and Hardening Remote Access VPN Solutions [pdf]</title><url>https://media.defense.gov/2021/Sep/28/2002863184/-1/-1/0/CSI_SELECTING-HARDENING-REMOTE-ACCESS-VPNS-20210928.PDF</url></story><parent_chain></parent_chain><comment><author>WatchDog</author><text>A lot of warnings against TLS based VPN solutions.  
I imagine these solutions are popular because they are more likely to function through corporate firewalls, where IPsec might be blocked.&lt;p&gt;Unsurprisingly no mention of wireguard, as it&amp;#x27;s not FIPS.  
However, unless you need FIPS compliance, it seems like the way to go these days.</text></comment>
<story><title>Selecting and Hardening Remote Access VPN Solutions [pdf]</title><url>https://media.defense.gov/2021/Sep/28/2002863184/-1/-1/0/CSI_SELECTING-HARDENING-REMOTE-ACCESS-VPNS-20210928.PDF</url></story><parent_chain></parent_chain><comment><author>implying</author><text>Strange how this implies that the end-all-be-all of VPNs is IPsec. I would&amp;#x27;ve loved to hear their opinion on wireguard and this generation of mesh VPNs</text></comment>