Why IPSec is strong ?
Definition: IPSec (Internet Protocol Security) provides security services at the IP layer by enabling a system to select required security protocols, determine the algorithm(s) to use for the service(s), and put in place any cryptographic keys required to provide the requested services. The IPsec architecture is described in the RFC-2401 (www.ietf.org RFC-2401). IPSec has been selected to be embedded in IPv6. IPSec is strong because it was designed to be strong and replace some older methods like PPTP. Today IPSec is the most secure way to access the corporate network from the Internet, here are some elements why: • Strong encryption mechanisms like Encapsulated Security Payload (ESP) using DES, 3DES, AES with long key length (i.e. 128, 192, 256) • Strong authentication of parties identity with the use of X-Auth and Certificate with long key length (i.e 1536, 2048) • Use of Internet Key Exchange (IKE) and ISAKMP to automatically exchange keys and mutual authentication.