IPsec VPN Design Considerations

This chapter covers the following topics:

  • VPN Basics
  • Types of IPsec VPNs
  • IPsec Modes of Operation and Security Options
  • Topology Considerations
  • Design Considerations
  • Site-to-Site Deployment Examples
  • IPsec Outsourcing

Oh, how much is today hidden by science! Oh, how much it is expected to hide!

Friedrich Nietzsche, The Genealogy of Morals, 1887

Private information is practically the source of every large modern fortune.

Oscar Wilde, An Ideal Husband, 1895

Virtual private networks (VPNs) are a means to establish a private network over any other network. Typically, the "other" network is deemed insecure, so traffic sent over it requires some kind of extra protection. The most common example of this is a VPN between an organization's sites and users across the Internet. The rest of this chapter assumes this is the kind of VPN you want.

Part I. Network Security Foundations

Network Security Axioms

Security Policy and Operations Life Cycle

Secure Networking Threats

Network Security Technologies

Part II. Designing Secure Networks

Device Hardening

General Design Considerations

Network Security Platform Options and Best Deployment Practices

Common Application Design Considerations

Identity Design Considerations

IPsec VPN Design Considerations

Supporting-Technology Design Considerations

Designing Your Security System

Part III. Secure Network Designs

Edge Security Design

Campus Security Design

Teleworker Security Design

Part IV. Network Management, Case Studies, and Conclusions

Secure Network Management and Network Security Management

Case Studies



Appendix A. Glossary of Terms

Appendix B. Answers to Applied Knowledge Questions

Appendix C. Sample Security Policies

INFOSEC Acceptable Use Policy

Password Policy

Guidelines on Antivirus Process


Network Security Architectures
Network Security Architectures
ISBN: 158705115X
EAN: 2147483647
Year: 2006
Pages: 249
Authors: Sean Convery

Flylib.com © 2008-2020.
If you may any questions please contact us: flylib@qtcs.net