Storage Basics: Securing iSCSI Using IPSec, Part 2

Continued from Page 4

Secure Server (Require Security)

When enabled, the Secure Server (Require Security) option offers the greatest level of security. The Secure Server policy secures all network traffic to or from the computer on which the IPSec policy is applied. This policy will reject all packets from non-aware IPSec clients. This policy has a rule to require security for all IP traffic, but notice that the rule allows ICMP traffic, and the default response rule is similar to the other predefined policies.

Rule 1:

IP Filter List: All IP Traffic
Filter Action: Require Security
Authentication: N/A
Tunnel Setting: None
Connection Type: All

IP Filter List: All ICMP Traffic
Filter Action: Permit
Authentication: Kerberos
Tunnel Setting: None
Connection Type: All

IP Filter List: <Dynamic>
Filter Action: Default Response
Authentication: Kerberos
Tunnel Setting: None
Connection Type: All

By examining the various rules in these predefined Server 2003 policies, we now have a better idea of what is needed to design security policies to meet the needs of an organization. Using rules to create policies allows for flexibility in a security design, making it possible for administrators to assign the right level of security required for IP data transmissions.

» See All Articles by Columnist Mike Harwood