Re: IPSEC

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 01/28/05 

Date: Thu, 27 Jan 2005 19:20:57 -0600

There is no way to do general logging with ipsec in Windows 2000. W2003 does
offer some logging such as for dropped packets. You would need to use a
software firewall such as Sygate to have some logging. Sygate is free for
personal user, is a stateful firewall [unlike ipsec] , and has extensive
logging capabilities. Ipsec is not meant to be a first line internet
firewall. One weakness of a packet filtering firewall is that due to the
rules it is possible for a user to scan your internal network by
manipulating the source port of the scan. For instance you may be allowing
all traffic from port 80 to your computer from the internet. I could use a
program such as Supercan 4 to scan your network by using port 80 as the
source port for my scan. A stateful firewall would not allow that. I think
ipsec is great for what it is good at, particularly on the lan, but I would
not use it as a permanent primary internet firewall. --- Steve

"Kerodo" <loopback@localhost.com> wrote in message
news:MPG.1c6316fa67ddee29989681@news.west.cox.net...
> I'm using IPSEC as a basic packet filter here on my Win2k machine. Is
> there any way to do any kind of logging with IPSEC so I can see what
> packets are being blocked?
>
> --
> Kerodo

Relevant Pages

  • Re: IPSEC
    ... There is no way to do general logging with ipsec in Windows 2000. ... offer some logging such as for dropped packets. ... software firewall such as Sygate to have some logging. ...
    (microsoft.public.win2000.general)
  • Re: Audit logons from outside local ip range
    ... > implement a software firewall to track logon attempts from unauthorized IP ... > address as you can with Ipsec filtering policy, ... > give you the kind of logging you want and is more difficult to configure ... >> I know how to setup enabling logging successful and unsuccessful logins. ...
    (microsoft.public.windows.server.security)
  • Re: IPSEC
    ... > software firewall such as Sygate to have some logging. ... Ipsec is not meant to be a first line internet ... One weakness of a packet filtering firewall is that due to the ...
    (microsoft.public.win2000.general)
  • Re: IPSEC
    ... > software firewall such as Sygate to have some logging. ... Ipsec is not meant to be a first line internet ... One weakness of a packet filtering firewall is that due to the ...
    (microsoft.public.win2000.security)
  • Re: ipfw and ipsec processing order for outgoing packets wrong
    ... Currently, ipsec processing is done first, ... > which makes packets to go through without firewall inspection. ... > processing in ip_output before ipsec processing. ...
    (freebsd-net)