Mission-Critical Active Directory
Learn how to plan and manage a large-scale enterprise through Windows 2000 Active Directory.
TABLE OF CONTENTS Mission-Critical Active Directory
5.3 Windows 2000 communications security
This book does not contain a detailed discussion of the communications security features of Windows 2000. In this section we will explore the communications security protocols available in Windows 2000 and how they fit into the TCP/IP networking model. After this we will focus on two communications security areas for which Windows 2000 provides a lot of new features: virtual private networking and remote access security.
5.3.1 Windows 2000 communications security protocols in the TCP/IP networking model
Communications security solutions can be applied at the different layers of the TCP/IP networking model. By applying several security solutions at different levels in the TCP/IP stack, a tighter and more solid security framework can be obtained. (This is an excellent example of the defense in depth principle, which was explained earlier in this chapter.) Figure 5.8 illustrates which layer is affected by the communications security protocols included in Windows 2000, as discussed in the following list:
Figure 5.8: TCP/IP model and communications security protocols in Windows 2000
- End-to-end security is provided at the application layer. Secure RPC and S/MIME can provide communications security on the application layer.
- Session security is provided at the level sitting between the application layer and the transport layer. SSL (Secure Sockets Layer) and TLS (Transport Layer Security) both provide session layer communications security.
- TCP, UDP, and IP protocol-level security is provided at the Internet and transport layers: IPsec is a well known Internet and transport layer communications security protocol.
- Windows 2000 communications...
Copyright Butterworth-Heinemann 2001 under license agreement with Books24x7
