IPv6 and IPSec

[suren <suren () intotoinc com>]

Hi,
   IPSec based security is MUST for IPv6. Due to this, I would 
   assume that end systems would use IPSec to secure the traffic 
   going out. 

   Quite a number of times, organizations would like to filter out 
   the connection(Firewall) run the data through centralized virus
   scanning/spam scanning engines. This requires clear traffic. 

   With respect to these, I have questions on how the deployments 
   going to be. One type of depolyments I can think of is:

         Central gateway implementing Firewall/Virus Scanning 
         engine and also terminting IPSec tunnels from local PCs and
         creating tunnels from the gateway to ultimate destination. 
         By doing this, the gateway gets hold of clear packets, can
         apply firewall rules, scan and any other operations.

    What other types of deployments would be required/considered by 
    organizations having IPv6 networks?

Thanks
Suren
www.intoto.com



_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards