Help - Search - Members - Calendar
Full Version: VLAN ACL Filter VS IPSEC OR RRAS Security
The Planet Forums > Security > General Security > Windows Security
mamin
I was wondering what is better among following three

1) VLAN ACL Filter (Assume standard ACL filter fits your needs)

2) IPSEC Security from win2003

3) RRAS Security From Win2003

Also, I was wondering that what is the diff. between IPSEC Vs RRAS ?. Whatever I read about both seems to have almost same functionality..Then why MS has two diff. tool built in to WIN2003...
dwillis
I think ipsec is more granular over rras. It puzzles me too why Microsoft has both.
igster
IPSec is the easiest to configure and mainitain IMO.
mamin
Is that any differnt thing I have to do if my server have multiple IPs or standard one IPSEC policy wil protect all the IPs at my server level.

What I need to make sure when you have multiple Ips assigned to the server ?

Please help...
cprompt
QUOTE (igster)
IPSec is the easiest to configure and mainitain IMO.

I'll go the other way and say RRAS is easier than IPSec. IPSec gives just about complete control over every packet that enters and leaves your ethernet port. However, if you just want to firewall off IPs and ports, RRAS is much easier.
igster
QUOTE (cprompt)
I'll go the other way and say RRAS is easier than IPSec. IPSec gives just about complete control over every packet that enters and leaves your ethernet port. However, if you just want to firewall off IPs and ports, RRAS is much easier.


In that case I agree but caution people to take steps to secure their server(s). If a port doesn't need to be open, close it. It isn't that difficult (regardless of RRAS or IPSec) and there are plenty of people willing to help you learn. Otherwise you are wide open and vulnerable to all sorts of malicious attacks.
Lunch[box]
Ease of Use: RRAS

Highest Level of Security: IPSec
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.