S3SS10N Wednesday - IP Security (part 1)

Instructor Bio-

Kelly HanderhanSkilled and certified in CISSP, CASP, and PMP, SME Kelly has taught several courses on Cybrary and is highly praised for her ability to effectively communicate important information in a relate-able and understandable way. You can view her extended (2 minute) bio here.Don't forget to comment!Tell us what you think, and share your own knowledge.

Notes

Listen to / Download the MP3[insert_vertical_space the_pixels="10"] Purpose of this Session:This lesson offers an introduction to IP Sec, which stands for IP Security. IP Security is very important to learn about because at the present time, there is no built in security to IP. This is an issue because many things are not designed with security in mind; they are merely designed to work. IP has been in use long before the invention of the Internet; the US government has been using IP Sec since the 1960s to secure phone lines. This lesson focuses on the current version which is IPv4, which isn’t designed to be secure, security is simply added as an afterthought. IPSec is an encapsulation framework that supports security. Encapsulation is often confused with encryption but they are actually different. Encapsulation is about packaging a product. An IPv4 packet consists of three components: • The header • The payload • The Chore IPv4 encapsulates all of these components in what is called tunnel mode which is the entire IPsec payload. IPv4 can also operate in transport mode which only encapsulates the payload, creating less overhead. These are the first steps in configuring IPSec and setting it up with a chosen mode based on how much security is desired. Remember encapsulation in and of itself does not provide security, it is a step in setting up the packet to be secure with some of the protocols IPsec utilizes.