Overview

The insider's guide to IPSec for every network professional--updated for the newest standards, techniques, and applications.Using IPSec, companies can build VPNs and other Internet-centered applications with confidence that their data will remain secure. IPSec, Second Edition is the most authoritative, comprehensive, accessible, and up-to-date guide to IPSec technology. Two leading authorities in IPSec standardization and implementation cover every facet of IPSec architecture and deployment, review important technical advances since IPSec was first standardized, and present new case studies that show how IPSec can provide end-to-end security in real business environments. Coverage includes: New, in-depth deployment guidance: policy definition, representation, distribution, and management New IPSec enhancements: compression, multicast, key recovery, L2TP support, PKI integration, and more IPSec architecture and components: payloads, headers, Internet Key Exchange, security associations, and more Implementation architecture and techniques, including overlapping and shared security associations, nested and chained tunnels, and more IPSec security in host-to-host, host-to-gateway, and gateway-to-gateway scenarios Establishing secure VPN tunneling A detailed look inside the IPSec kernelIPSec, Second Edition delivers the techniques and insight you need to protect all your digital assets, wherever they are--on the Internet, your intranet, your extranet, or your VPN. Whether you're a networking or Web professional, software developer, or security specialist, you'll find it indispensable.

Full Product Details

Author:   Naganand Doraswamy ,  Dan Harkins
Publisher:   Pearson Education (US)
Imprint:   Prentice Hall
Edition:   2nd edition
Dimensions:   Width: 17.80cm , Height: 2.20cm , Length: 23.20cm
Weight:   0.454kg
ISBN:  

9780130461896

ISBN 10:   013046189
Pages:   288
Publication Date:   21 March 2003
Audience:   College/higher education ,  Tertiary & Higher Education
Format:   Hardback
Publisher's Status:   Out of Print
Availability:   Out of stock  

Table of Contents

Preface. I. OVERVIEW. 1. Cryptographic History and Techniques. Secrets in History. Rise of the Internet. Internet Security. Cryptographic Building Blocks. Crypto Concepts. More Information. 2. TCP/IP Overview. Introduction to TCP/IP. Addressing. Domain Name System. Security-at What Level? 3. IP Security Overview. The Architecture. Encapsulating Security Payload (ESP). Authentication Header (AH). Internet Key Exchange. II. DETAILED ANALYSIS. 4. IPSec Architecture. The IPSec Roadmap. IPSec Implementation. IPSec Modes. Security Associations. IPSec Processing. Fragmentation. ICMP. 5. The Encapsulating Security Payload (ESP). The ESP Header. ESP Modes. ESP Processing. 6. The Authentication Header (AH). The AH Header. AH Modes. AH Processing. 7. The Internet Key Exchange. ISAKMP. IKE. The IPSec DOI. Summary. III. DEPLOYMENT ISSUES. 8. Policy. Policy Definition Requirement. Policy Representation and Distribution. Policy Management System. Deployment. Setting Up the Policy. 9. IPSec Implementation. Implementation Architecture. IPSec Protocol Processing. Fragmentation and PMTU. ICMP Processing. 10. IP Security in Action. End-to-End Security. 11. Deployment Scenarios (Using IPsec to Secure the Network). Site-to-Site Policies. Remote Access Policies. Four Office Company Example. Multiple Company Extranet Example. Outsourcing Networks. Summary. 12. IPSec Futures. Compression. Multicast. Key Recovery. L2TP. Public Key Infrastructure. Bibliography. Index.

Reviews

Author Information

NAGANAND DORASWAMY is a senior principal engineer at Nortel Networks in Billerica, MA and an active participant in the IETF and key industry panels on VPNs and IP security. He was a network security architect at Bay Networks (currently Nortel Networks) and is currently working on next-generation router architectures and protocols. He was the technical lead for IP Security at FTP Software. DAN HARKINS, formerly a senior software engineer in the Network Protocol Security Group at Cisco Systems, is currently a Senior Scientist at Network-Alchemy in Santa Cruz, CA and is active in several IETF working groups. He wrote IPSec's standard Internet Key Exchange (IKE) key management protocol.

Tab Content 6

Author Website:  

Customer Reviews

Recent Reviews

No review item found!

Add your own review!

Countries Available

All regions