Home page logo

basics logo Security Basics mailing list archives

RE: Secure communication between WAN links
From: "Hayes, Ian" <Ian.Hayes () wynnlasvegas com>
Date: Wed, 5 Jul 2006 09:52:02 -0700

If you're using Cisco routers, you can deploy a site-to-site IPSec
tunnel that will encrypt all traffic between your locations. Every Cisco
router I've worked with supports this, and Cisco's online documentation
covers this extensively.

Alternately, you could have a Windows box tunnel everything to the
remote site, but I wouldn't recommend this configuration. If you have a
few bucks to spend, and your sites are small enough, get some Netscreen
5GT firewalls and build a tunnel between them. Takes about 5 minutes to
set up both firewalls.

Ian Hayes | Senior Systems Engineer
Wynn Las Vegas
3131 South Las Vegas Blvd, Las Vegas, NV 89109
Ph (702) 770-3252 | Cell (702) 266-6002
Ian.hayes () wynnlasvegas com

-----Original Message-----
From: Epidemic SomeGuy [mailto:epidemic.mail () gmail com]
Sent: Sunday, July 02, 2006 6:39 PM
To: security-basics () securityfocus com
Subject: Secure communication between WAN links

Hi, I am working on an assignment planning and implementing a windows
2003 network.
We have a small organisation with departments on different locations.
One of the assignments was to secure the communication between two
sites connected trough WAN links.
The question is:
What is the "best" solution to use to secure the communication between
these two sites?
We can only use Windows 2003 servers.. no 3rd party software, or
hardware based solutions..
The connection speed between the sites is 256 Kbps.
I guess an IPSEC tunnel or something like that is the right way to go,
but i don't have any experience doing this, and I want to be sure I'm
implementing it the right way.
I have googled a while, but I cant find any articles describing my
choices,  and how to correctly install and implement it.
(not enough to make an intelligent decision anyway).

Sorry about my bad English and thanks for your help!

This list is sponsored by: Norwich University

The NSA has designated Norwich University a center of Academic
in Information Security. Our program offers unparalleled Infosec
education and the case study affords you unmatched consulting
Using interactive e-Learning technology, you can earn this esteemed
without disrupting your career or home life.



This list is sponsored by: SensePost

Hacking, like any art, will take years of dedicated study and
practice to master. We can't teach you to hack. But we can teach you
what we've learned so far. Our courses are honest, real, technical
and practical. SensePost willl be at Black Hat Vegas in July. To see
what we're about, visit us at:


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]