Improving Web Application Security: Threats and - CGISecurity

How To:Use IPSec for Filtering Portsand AuthenticationApplies ToThis information applies to server computers that run the following:●Microsoft ® Windows ® 2000 Server or Windows Server 2003 operating system● SQL Server 2000SummaryInternet Protocol security (IPSec) is a protocol, not a service, that provides encryption,integrity, and authentication services for IP-based network traffic. Because IPSecprovides server-to-server protection, you can use IPSec to counter internal threatsto the network, including eavesdropping, tampering, man in the middle attacks,IP spoofing, and other password-based attacks. IPSec is completely transparentto applications because encryption, integrity, and authentication services areimplemented at the transport level. Applications continue to communicatenormally with one another using TCP and UDP ports.ContentsThis How To contains the following sections:●●●●●What you must knowRestricting Web server communicationRestricting database server communicationRestricting server-to-server communicationUsing IPSec tools