Chapter 69. How to Use IPSEC to Protect Your Network

In Windows, you enable IPSEC via security policy. Either you can edit the local security policy of individual machines or you can use domain group policy (Item 74) to configure IPSEC in a consistent way on a whole group of machines, which is a great way to go. Either way you do it, the procedure for configuring IPSEC is the same.

If you look at the security policy for a machine, you'll see a section called IP Security Policies. Figure 69.1 shows what mine looks like on my Windows XP box. It lists several optional policies (strategies, if you will) for applying IPSEC. Notice that they are all disabled by default.

Figure 69.1. Examining IPSEC policy

The simplest way to turn on IPSEC support between ...

Get The .NET Developer's Guide to Windows Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.