Solved

ipsec setup with Windows Server 2008

Posted on 2011-09-06
9
461 Views
Last Modified: 2012-05-12
If I want all the computers within the domain communicate using IPSec, do I have to configure peer t o peer communication of each of the computer with each of the computer within in domain.

Is there any procedure to configure IPSec setup with Windows Server 2008 for this purpose?
0
Comment
Question by:tommym121
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 20

Expert Comment

by:brwwiggins
ID: 36495485
do you just want to use IPSEC between client & server or is there client to client traffic?
0
 

Author Comment

by:tommym121
ID: 36497476
I am looking a peer to peer communication.  Clients talk to servers, Servers talk to servers.
0
 
LVL 20

Accepted Solution

by:
brwwiggins earned 500 total points
ID: 36497848
Some of this will depend on what version your clients/servers are. You can easily setup these rules in group policy or locally with the Windows Firewall with advanced security MMC. There you can specify connection security rules for say your domain profile and have it either require or request encrypted traffic. You could also configure it to use Kerberos auth to verify identity between computers.

It will be more difficult if you have XP/2003 in the mix
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:tommym121
ID: 36498119
I will be using mainly Windows server 2008 and Windows 7.  I am hoping I can set a rule to say enable encrypted traffice within the domains for each PC but not to set specific rule to talk to each of the PC from a PC within the domain.

Would you be able to point to me how to do that?
0
 

Author Comment

by:tommym121
ID: 36498288
Or please let me know the right terminology so I can search for the right info to find how to do that. Thanks.
0
 
LVL 20

Expert Comment

by:brwwiggins
ID: 36498328
let me try to get some screenshots going and show you an example. As usual there will be several different ways you can configure the rules.
0
 
LVL 20

Expert Comment

by:brwwiggins
ID: 36498367
0
 

Author Comment

by:tommym121
ID: 36498540
Thanks for making the screen shot and looking forward to it.
0
 

Author Closing Comment

by:tommym121
ID: 36580588
no screen shot
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
In this blog we highlight approaches to managed security as a service.  We also look into ConnectWise’s value in aiding MSPs’ security management and indicate why critical alerting is a necessary integration.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question