VPN Certificates or Pre-Shared Secret?

Poll created by Danny Jung Champion on Sep 13, 2018

Check Point recommends using VPN certificates

as most secure authentication method for IPsec VPNs (sk133152).


As admins might fear that handling certificate-based VPNs could be too complicated I've created this HowTo:

HowTo Set Up Certificate Based VPNs with Check Point Appliances


But certificate based VPNs also have a downside: They are dependant on an always operational and accessible SmartCenter Server which hosts the CA that issues the VPN certificates. Certificate based VPN tunnels will go down when the CA is not reachable when the VPN certificate is checked (default: every 24 hours).

This is because of security. However, many admins / companies rely more on connectivity, which is where Pre-shared secrets are the best choice.


What are you using primarily? VPN Certificates or Pre-shared secrets?

28 total votes You cannot vote on this poll
  • VPN Certificates
  • Pre-shared secret