Best Practices
Ensure that the TCP/IP stack on your Windows 2000 and Windows XP computers is appropriately secure, based on the threats to it. This is especially true of any computer directly connected to the Internet or in screened subnets.
ICF provides an excellent degree of protection for mobile clients and home computers. Be certain to provide training to users on how to enable and disable ICF.
By using IPSec hardware accelerators on computers that will have many IPSec sessions at a time, such as servers, you can prevent the computer s CPU performance from being overly taxed.