SECURING NETWORK TRAFFIC WITH IPSEC

1
SECURING NETWORK TRAFFIC WITH IPSEC

• Chapter 6

2
GOALS OF IPSEC

• Protects the contents of IP packets
• Provides defense against network attacks

P178
3
PROTECTING AGAINST SECURITY ATTACKS
P178
4
WHAT IS IPSEC?

• IPSec is an architectural framework that provides
  cryptographic security services for IP packets.

P179
5
IPSEC SECURITY FEATURES

• Automatic security association (SA)
• IP packet filtering
• Network layer security
• Peer authentication
• Data origin authentication
• Data integrity
• Data confidentiality
• Anti-replay
• Key management

P180
6
NEW IPSEC FEATURES IN MICROSOFT WINDOWS SERVER
2003

• The IP Security Monitor snap-in
• Stronger cryptographic master key
• The Netsh command-line tool
• Computer startup security
• Persistent policies
• Improved IPSec functionality over Network Address
  Translation (NAT)
• Improved load balancing
• Resultant Set of Policies (RSoP)

P181
7
IPSEC PROTOCOLS

• Authentication Header (AH)
• Encapsulating Security Payload (ESP)

P182
8
IPSEC MODES

• Transport mode
• Tunnel mode

P182
9
SECURITY ASSOCIATIONS (SAs)

• Internet Security Association and Key Management
  Protocol (ISAKMP)
• IPSec
• Security Parameters Index (SPI)

P183
10
INTERNET KEY EXCHANGE (IKE)

• Oakley Key Determination Protocol
• Diffie-Hellman key exchange
• Dynamic rekeying

P184
11
IPSEC POLICY AGENT SERVICE
P185
12
IPSEC DRIVER
P186
13
SECURITY NEGOTIATION PROCESS
P188
14
IPSEC SECURITY POLICIES
P191
15
COMPONENTS OF IPSEC POLICIES
P191
16
DEFAULT IPSEC SECURITY POLICIES

• Server (Request Security)
• Client (Respond Only)
• Secure Server (Require Security)

P191
17
DEPLOYING IPSEC POLICIES

• Using local policies
• Using the Active Directory directory service
• Mixed-mode environment
• Persistent policies

P193
18
IMPLEMENTING IPSEC USING CERTIFICATES

• X.509 certificates
• Role of a certification authority (CA)

P195
19
CONFIGURING IPSEC TO USE A CERTIFICATE
P196
20
IPSEC AND NAT

• Problems associated with IPSec and NAT
• IKE over NAT

P197
21
MONITORING IPSEC USING IP SECURITY MONITOR
P198
22
IPSEC-RELATED EVENTS IN EVENT VIEWER
P201
23
USING NETSH AND NETDIAG TO MANAGE AND MONITOR
IPSEC
P202
24
SUMMARY

• The purpose and features of IPSec in a Windows
  Server 2003 environment
• IPSec protocolsAH and ESP
• IPSec modestransport and tunnel
• SAs
• IKE
• IPSec Policy Agent

25
SUMMARY (continued)

• IPSec security policies
• Deploying IPSec security policies
• IPSec and NAT
• Tools for managing and monitoring IPSec

26
Lab 6

• Securing Network Traffic by using IPSEC
• 130 minutes