How to implement IPsec between LINUX and Windows Vista: Why use IPsec network security?
I discussed this very topic with several people whilst @ LUGRadioLive 2007 earlier this year - I'm glad to say that the testing is complete and you can save time when securing a mixed LINUX and Microsoft environment by reading the details for yourself.
Q)WHY use IPSec?
A) IPsec provides the means to isolate your network from machines outside your control - you can force machines to automatically identify themselves and block access to systems outside your management scope. You can optionally encrypt traffic between the systems too though you need to consider the trade off between inspection and confidentiality. IPsec network security is natively supported by most modern operating systems and if correctly configured takes place "behind the scenes" meaning that no user interaction is required.
The team at Port25 (Microsoft's Open Source Software Lab) have released the results of their interoperability testing for IPsec between a range of LINUX systems and Windows Vista - if you have a mixed environment it's well worth a read.
There's a good description of how IPsec can be used to improve network security on DarkReading though their link to the afore mentioned interop guide was broken when I checked it - use the one listed above.
Thanks to Roger Halbheer for his post which inspired this one.
Note: Thanks to Alun for correcting my capitalisation of IPsec!
Comments
Anonymous
January 01, 2003
Interesting point at blogs.technet.comAnonymous
January 01, 2003
PingBack from http://geeklectures.info/2007/12/28/how-to-implement-ipsec-between-linux-and-windows-vista-why-use-ipsec-network-security/Anonymous
January 01, 2003
Based on my post about IPSec, Steve Lamb posted about IPSec Interoperability and has an interesting follow-upAnonymous
December 30, 2007
Uh... it's IPsec, not IPSec. :-) Sadly, Word's spelling checker gets this wrong all the time.