RE: Secure communication between WAN links

["Hayes, Ian" <Ian.Hayes () wynnlasvegas com>]

If you're using Cisco routers, you can deploy a site-to-site IPSec
tunnel that will encrypt all traffic between your locations. Every Cisco
router I've worked with supports this, and Cisco's online documentation
covers this extensively.

Alternately, you could have a Windows box tunnel everything to the
remote site, but I wouldn't recommend this configuration. If you have a
few bucks to spend, and your sites are small enough, get some Netscreen
5GT firewalls and build a tunnel between them. Takes about 5 minutes to
set up both firewalls.

Ian Hayes | Senior Systems Engineer
Wynn Las Vegas
3131 South Las Vegas Blvd, Las Vegas, NV 89109
Ph (702) 770-3252 | Cell (702) 266-6002
Ian.hayes () wynnlasvegas com
 

> -----Original Message-----
> From: Epidemic SomeGuy [mailto:epidemic.mail () gmail com]
> Sent: Sunday, July 02, 2006 6:39 PM
> To: security-basics () securityfocus com
> Subject: Secure communication between WAN links
>
> Hi, I am working on an assignment planning and implementing a windows
> 2003 network.
> We have a small organisation with departments on different locations.
> One of the assignments was to secure the communication between two
> sites connected trough WAN links.
> The question is:
> What is the "best" solution to use to secure the communication between
> these two sites?
> We can only use Windows 2003 servers.. no 3rd party software, or
> hardware based solutions..
> The connection speed between the sites is 256 Kbps.
> I guess an IPSEC tunnel or something like that is the right way to go,
> but i don't have any experience doing this, and I want to be sure I'm
> implementing it the right way.
> I have googled a while, but I cant find any articles describing my
> choices,  and how to correctly install and implement it.
> (not enough to make an intelligent decision anyway).
>
> Sorry about my bad English and thanks for your help!
------------------------------------------------------------------------
--
> -
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic
Excellence
> in Information Security. Our program offers unparalleled Infosec
> management
> education and the case study affords you unmatched consulting
experience.
> Using interactive e-Learning technology, you can earn this esteemed
> degree,
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
--
> -



---------------------------------------------------------------------------
This list is sponsored by: SensePost

Hacking, like any art, will take years of dedicated study and
practice to master. We can't teach you to hack. But we can teach you
what we've learned so far. Our courses are honest, real, technical
and practical. SensePost willl be at Black Hat Vegas in July. To see
what we're about, visit us at:

http://www.sensepost.com/training.html
---------------------------------------------------------------------------