Network Security Features of HP-UX 11i v1 and 11i v2

Page 10

Internet Protocol Security Protocol Suite—HP-UX IPSec

The Internet Engineering Task Force (IETF) IP Security Protocol (IPsec) working group has defined a set

of specifications for cryptographically based authentication, integrity, and confidentiality services at the

IP layer of the network stack. HP-UX IPSec is the HP implementation of IPsec. HP-UX IPSec

implements rule-based policy management.

As shown in Figure 2, IPsec technology can be deployed to provide secure tunnels through the public

Internet. These tunnels protect packet transfer from a remote workstation to a corporate intranet or link

geographically disjointed portions of an intranet without using expensive leased lines. Tunnels can also be

used to link the computing facilities of business partners and to secure mobile and wireless node

communications. In all of these cases, IPsec technology creates, in effect, a Virtual Private Network

(VPN)—that is, a private network within the global Internet. It is “virtual” because it uses tunnels to

effectively create a separate logical network within a physical network. It is “private” because outside

users cannot see or modify the data being transmitted.

Mail

Servers