Chapter 8: Planning and Configuring IPSec

---

Exam Objectives in this Chapter:

• Plan IPSec deployment.

• Decide which IPSec mode to use.

• Plan authentication methods for IPSec.

• Test the functionality of existing applications and services.

• Configure IPSec policies to secure communication between networks and hosts. Hosts include domain controllers, Internet Web servers, databases, e-mail servers, and client computers.

• Configure IPSec authentication.

• Configure appropriate encryption levels. Considerations include the selection of perfect forward secrecy (PFS) and key lifetimes.

• Configure the appropriate IPSec protocol. Protocols include Authentication Header (AH) and Encapsulating Security Payload (ESP).

• Configure IPSec inbound and outbound filters and filter action.

---