Craig and all, Craig Whitmore wrote:
Jeff Williams wrote:
I would recommend against IPsec at this time. I have done 4 implementations. It is quite expensive and time consuming not to mention a administration nightmare if you are not very careful...
If you want better security then nothing is expensive.
How true. But there are limits. As you may know, in the US and the UK many IT companies as well as ISP's and Telecoms are laying off the security guys at the moment to trim their budgets. I personally believe this practice to trim budgets is a huge mistake form a management point of view. But that seems to be a trend presently, none the less. In fact CNN did a report on this just a couple of days ago.
But saying that, there are quite a number of Free IPSEC software programs such as FreeSwan which work very well and not that hard to implement.
Yeah Freeswan works ok, but I wouldn't say well. It is too easy to hack. We use elliptical curve Encapsulation Encryption as many western Govmts. require that level of encryption on IP's. As I was one of the original developers (Several years ago now) on ECEE it is a snap for me or my guys to implement it. But we just don't have enough trained staff to do the demand presently.
Thanks Craig Whitmore Orcon Internet http://www.orcon.net.nz
Regards, -- Jeffrey A. Williams Spokesman for INEGroup - (Over 118k members strong!) CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng. Information Network Eng. Group. INEG. INC. E-Mail jwkckid1(a)ix.netcom.com Contact Number: 972-447-1800 x1894 or 214-244-4827 Address: 5 East Kirkwood Blvd. Grapevine Texas 75208 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog