Re : VPN over VSAT Link

["Brian Palmer" <brianpalmer () computermail net>]

ROI on securing VSAT communications.  How do you do ROI on securing any of your other traffic?  Figure it the same way. 
 I.E.  What would it cost the business if any of this data were lost/destroyed, stolen, found it's way into a 
competitors hands, altered, etc. versus the cost of securing it.  

As far as the need for encrytping VSAT.  DEFINITELY!  While it's not quite as easy to intercept as WLAN it's still 
possible and easy enough for someone interested in getting your companies data.  Also, you said you have a proof of 
concept with one site so use metrics on that site to determine any performance issues.  

Good luck

--- soul1273 () yahoo fr wrote:

From: soul <soul1273 () yahoo fr>
To: Lee Hilt <lhilt () mbc edu>, security-basics () securityfocus com
Subject: Re : VPN over VSAT Link
Date: Thu, 14 Feb 2008 20:50:46 +0000 (GMT)

I have the same opinion but some people in my organization think that VSAT or satellite link is secure so there is no 
need to encrypt.
So i am trying to convince them that our security should not be handled by VSAT or satellite provider. So we need to 
secure our VSAT network in order to secure the communication end to end with our field offices.

We have implement a proof of concept  LAN-to-LAN IPSec VPN solution with cisco PIX router between one field office and 
the Headquater. It is working fine but the question is now about return on investment and performance issue. They want 
us to justify the investment and if there will be performance issue.

any advice?

thank you



----- Message d'origine ----
De : Lee Hilt <lhilt () mbc edu>
À : soul <soul1273 () yahoo fr>; security-basics () securityfocus com
Envoyé le : Jeudi, 14 Février 2008, 18h24mn 13s
Objet : RE: VPN over VSAT Link

in my opinion, even though the traffic originates in a non-traditional way
(I.E. not "on the wire") it eventually gets there. LOGICALLY all traffic is
"On the wire" so despite the originization, the traffic is subject to
sniffing... so I would say if you have any sensitive assets, some sort of
traffic encryption would be needed


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of soul
Sent: 2008-02-14 9:08
To: security-basics () securityfocus com
Subject: VPN over VSAT Link

Dear ALL

My company have 15 field offices connected by a VSAT Network and all the
applications are centralised in the Headquater. We are discussing about the
need to have IPSec VPN LAN-2-LAN over VSAT transactions and access to
applications between field offices and Headquater.

Is it necessary to have encryption over satellite link?

thank you.



____________________________________________________________________________
_
Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail
http://mail.yahoo.fr


      _____________________________________________________________________________ 
Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail http://mail.yahoo.fr