From the course: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

Unlock this course with a free trial

Join today to access over 24,000 courses taught by industry experts.

IPsec

IPsec

- [Presenter] When the developers of Modern Network Technology created the TCP/IP protocol suite, they honestly didn't pay too much attention to security. Now, to be fair, when they developed these standards in the 1970s, security really wasn't much of an issue. Now, this has created a dilemma for cybersecurity professionals ever since. We have a set of protocols that were designed without security in mind, and we now need to retrofit those protocols to add on security capabilities. The internet protocol security, or IPsec framework, is a set of protocols designed to add security capabilities to TCP/IP. Unlike TLS, IPsec reaches deep into the protocol stack and provides security for the entire payload of encrypted communications. IPsec uses two protocols to protect information. The encapsulating security payload, or ESP protocol, provides both confidentiality and integrity protection for the payloads of packets. The authentication headers, or AH protocol, uses an integrity check value…

Contents