HP IPSec Questionaire

[HP IPFilter IPSec Team]

In an effort to better meet your needs, HP would like to get your feedback on the IPSec product. We would appreciate a few minutes of your time to address the following questions:
- How do you currently use or plan to use
IPSec (e.g. business context, why are you
protecting the network communication)?

- What hardware and software will be a part of
your IPSec solution (Please include HP and
non-HP vendors)?

- If you are currently using IPSec, what are
your thoughts on the product?
(usability, documentation, support, features)

- Do you have any enhancements that you would
like to have incorporated into IPSec?
(Please assign a priority if possible).

Thank You for your Time,
HP IPSec Team
You may respond via a HP-only email:
hp-ipfilter-ipsec@hpuxmail.cup.hp.com

[Steven Sim Kok Leong · Accepted solution]

Hi,

> How do you currently use or plan to use
IPSec (e.g. business context, why are you
protecting the network communication)?

We currently use it via CISCO VPN to protect sensitive and/or critical information. An example is user authentication and authorization to sensitive corporate servers and transmission of corporate data especially over the insecure Internet. In short, for providing Extranet access.

We use SSL for web-based authentication

> What hardware and software will be a part of
your IPSec solution (Please include HP and
non-HP vendors)?

CISCO.

> If you are currently using IPSec, what are
your thoughts on the product?
(usability, documentation, support, features)

I find the VPN client intuitive to use. It works well through my broadband router at home.

> Do you have any enhancements that you would
like to have incorporated into IPSec?
(Please assign a priority if possible).

IPSec is itself strictly a protocol. It has some AH issues with PAT and NAT unless the gateway resides on or in front of the firewall that does the translation. Well, it is give-and-take for security vs convenience.

Hope this helps. Regards.

Steven Sim Kok Leong

[Magnus Ljung_2]

- How do you currently use or plan to use IPSec

Transport mode, ESP with autentication, between sensitive HP-UX machines on the intranet.

- Do you have any enhancements that you would
like to have incorporated into IPSec?

AES Support would be nice

[Doug Heath]

Please note that AES support is in the latest version of HP-UX IPSec (A.01.05). This can be obtained via www.software.hp.com. The CD version of this should be available sometime this month.

Also, for those of you responding to this post, if it isn't giving away too much, it would be nice to know more of the business context in which you are using HP-UX IPSec (e.g. what industry are you in, what is the application or the general type of data being protected, etc).

Thanks

[Volker Borowski]

Hi,

- How do you currently use or plan to use
IPSec
>>> Intending to dump leased lines against VPN connections

- What hardware and software will be a part of
your IPSec solution
>>> Watchguard with VPN

- If you are currently using IPSec, what are
your thoughts on the product?
>>> Our Watchguard is rock-Solid, reasonable price, is able to work with other (non-Watchguard) IP-SEC-products, supports clustering, but a bit slow if a lot of firewall rules

Volker