RE: Placement of a VPN Appliance

["Stewart, John" <johns () artesyncp com>]

Crist and Ben write:
> > [0] Oh, and there is that complete abomination of UDP encapsulated
> > IPsec we'll probably have to let through.
>
> What makes you unhappy with IPSec-in-UDP? It seems like a 
> cool hack, to me.
> Solves the NAT problem nicely. Yes, there's a performance 
> hit, but that's
> the price you pay. I'd actually like to see an RFC / 
> registered port for it,
> to tell the truth - just for interop purposes.

UDP encapsulated IPsec? Could you elaborate or direct me to where I can find
more about this? What vendors are doing this (I assume to allow VPNs to work
through NAT firewalls?)?

thanks!

johnS

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards