[ale] IPSEC Operations Issues

[Geoffrey]

Ryan Matteson wrote:
> as anyone experienced any problems when deploying IPSEC in
> their production environments? We are debating using IPSEC
> between a Solaris and HPUX system, as the necessary binaries
> are provided with both. Several firewalls reside between the
> hosts, but I am not aware of any NAT'ing going on. We would
> like to use AH and ESP to encrypt the headers and payload. We
> are also possibly debating using Checkpoint Firewall-1 to
> provide this functionality. I believe this would be a much
> more efficient means. Just curious what the gurus on the list
> think.

I know nothing about hp or solaris when it comes to ipsec.  That said, 
I've done ipsec through my linux firewall, nat and all, to a corporate 
server.  I operated that way for about 2 years, before I got my 
standalone firewall/router/vpn device (runs Linux of course!).

Not much help, but it can be done.

> 
> Thanks,
> Ryan
> 


-- 
Until later: Geoffrey		esoteric at 3times25.net

I didn't have to buy my radio from a specific company to listen
to FM, why doesn't that apply to the Internet (anymore...)?


---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.