IPSEC Structure
Nested headers: IP, ESP or AH, maybe another IP, TCP or UDP, then data
Cryptographic protection can be host-to-host, host-to-firewall, or firewall-to-firewall.
Option for per-user keying.
Works with IPv4 and IPv6.
Previous slide
Next slide
Back to first slide
View graphic version