Metro over JAX-WS

Metro has two fundamental levels:
- JAX-WS RI (that follows the JAX-WS JCP specification) - this includes JAXB
- WSIT/Tango - this provides WS-*: Security, SecureConversation, Trust, ReliableMessaging, AtomicTransactions, MEX

Unless you need the upper level WSIT features you can just use JAX-WS. JAX-WS supports SSL (it supports WS-I BSP).

If you want end-to-end message-level security then you need the WSIT/Tango layer of Metro. WSIT is intended to provide compatibility across the webservices developed in Java & .Net3.0 platforms, along with security, reliable & transaction guaranteeing features.