Solved

ipsec setup with Windows Server 2008

Posted on 2011-09-06
9
451 Views
Last Modified: 2012-05-12
If I want all the computers within the domain communicate using IPSec, do I have to configure peer t o peer communication of each of the computer with each of the computer within in domain.

Is there any procedure to configure IPSec setup with Windows Server 2008 for this purpose?
0
Comment
Question by:tommym121
  • 5
  • 4
9 Comments
 
LVL 20

Expert Comment

by:brwwiggins
Comment Utility
do you just want to use IPSEC between client & server or is there client to client traffic?
0
 

Author Comment

by:tommym121
Comment Utility
I am looking a peer to peer communication.  Clients talk to servers, Servers talk to servers.
0
 
LVL 20

Accepted Solution

by:
brwwiggins earned 500 total points
Comment Utility
Some of this will depend on what version your clients/servers are. You can easily setup these rules in group policy or locally with the Windows Firewall with advanced security MMC. There you can specify connection security rules for say your domain profile and have it either require or request encrypted traffic. You could also configure it to use Kerberos auth to verify identity between computers.

It will be more difficult if you have XP/2003 in the mix
0
 

Author Comment

by:tommym121
Comment Utility
I will be using mainly Windows server 2008 and Windows 7.  I am hoping I can set a rule to say enable encrypted traffice within the domains for each PC but not to set specific rule to talk to each of the PC from a PC within the domain.

Would you be able to point to me how to do that?
0
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 

Author Comment

by:tommym121
Comment Utility
Or please let me know the right terminology so I can search for the right info to find how to do that. Thanks.
0
 
LVL 20

Expert Comment

by:brwwiggins
Comment Utility
let me try to get some screenshots going and show you an example. As usual there will be several different ways you can configure the rules.
0
 
LVL 20

Expert Comment

by:brwwiggins
Comment Utility
0
 

Author Comment

by:tommym121
Comment Utility
Thanks for making the screen shot and looking forward to it.
0
 

Author Closing Comment

by:tommym121
Comment Utility
no screen shot
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Phishing is at the top of most security top 10 efforts you should be pursuing in 2016 and beyond. If you don't have phishing incorporated into your Security Awareness Program yet, now is the time. Phishers, and the scams they use, are only going to …
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now