Re: IPSec policies with Kerberos only??

From: Spin (Spin_at_spin.com)
Date: 07/01/04 

Date: Wed, 30 Jun 2004 22:03:32 -0400

That's what I thought. Thanks for confirming.

"Simon Geary" <simon_geary@hotmail.com> wrote in message
news:%23iYIhdvXEHA.1652@TK2MSFTNGP09.phx.gbl...
> Yes, by just using Kerberos you can run IPSec without getting your hands
> dirty with keys or certificates. It makes it a breeze to set up and is
> recommended if you have a small network.
>
> "Spin" <Spin@spin.com> wrote in message
news:2kgtdbF2896sU1@uni-berlin.de...
> > Gurus,
> >
> > I have been studying Windows Server 2003. Regarding IPSec policies, if
> one
> > does not want to use a pre-shared key (least secure), and does not have
> > Certificate Server, can one still implement IPSec policies with just
> > straight-up Kerberos as the default authentication method?
> >
> >
>
>
>

Relevant Pages

  • Re: The art of negotiation and trust in IPSEC
    ... They would need to be ipsec certificates or possibly machine certificates as ... IPSEC to confirm the validity of the Cert on the remote endpoint? ... > (or preshared key)) to authenticate/validate the enpoints of the IPSEC ...
    (microsoft.public.win2000.security)
  • Re: IPSEC wireless router ?
    ... > The main advantage of IPSec is the Sec part, ... digital certificates issued by these organizations called certification ... SSL implementation at the time was one-way authentication between the ... supporting digital signature authentication ... ...
    (alt.internet.wireless)
  • Re: IPSEC with non-domain Server
    ... Certificates are not the "most secure", rather, they are one of the 2 "more ... > authenticate computers and protect traffic integrity and confidentiality ... > Attacks on IPSec and Other Security Concerns ...
    (microsoft.public.security)
  • Re: Shared Certificate Store in Active Directory
    ... There is no need to store IPSEC certs in the AD for IPSEC, ... > Active Directory so you can make Certificates and their ... > Certificates rather than Kerberos? ...
    (microsoft.public.win2000.security)
  • Re: IPSec policies with Kerberos only??
    ... by just using Kerberos you can run IPSec without getting your hands ... dirty with keys or certificates. ...
    (microsoft.public.windows.server.general)