ipsec setup with Windows Server 2008

tommym121
tommym121 used Ask the Experts™
on
If I want all the computers within the domain communicate using IPSec, do I have to configure peer t o peer communication of each of the computer with each of the computer within in domain.

Is there any procedure to configure IPSec setup with Windows Server 2008 for this purpose?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
View Solution Only
brwwigginsIT Manager

Commented:
do you just want to use IPSEC between client & server or is there client to client traffic?
tommym121

Author

Commented:
I am looking a peer to peer communication.  Clients talk to servers, Servers talk to servers.
IT Manager
Commented:
Some of this will depend on what version your clients/servers are. You can easily setup these rules in group policy or locally with the Windows Firewall with advanced security MMC. There you can specify connection security rules for say your domain profile and have it either require or request encrypted traffic. You could also configure it to use Kerberos auth to verify identity between computers.

It will be more difficult if you have XP/2003 in the mix
OWASP: Avoiding Hacker Tricks

Learn to build secure applications from the mindset of the hacker and avoid being exploited.

Start Today!
tommym121

Author

Commented:
I will be using mainly Windows server 2008 and Windows 7.  I am hoping I can set a rule to say enable encrypted traffice within the domains for each PC but not to set specific rule to talk to each of the PC from a PC within the domain.

Would you be able to point to me how to do that?
tommym121

Author

Commented:
Or please let me know the right terminology so I can search for the right info to find how to do that. Thanks.
brwwigginsIT Manager

Commented:
let me try to get some screenshots going and show you an example. As usual there will be several different ways you can configure the rules.
brwwigginsIT Manager

Commented:
tommym121

Author

Commented:
Thanks for making the screen shot and looking forward to it.
tommym121

Author

Commented:
no screen shot

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial