Allied Telesis AT-2912T - Manual (Page 34)

Enabling Vista IPSec
34
Introduction
Traditionally, IPSec has been used for remote connections, but this
feature has moved into the Local Area Network (LAN) to secure local
network traffic against eavesdropping.
Vista’s Next Generation TCP/IP stack provides APIs for accessing
brackets to allow advanced granularity to filter both inbound and outbound
traffic.This was not possible with Microsoft’s XP Operating system. In
addition, Vista’s security management now closely ties the Firewall and
IPSec features together by using a snap-in called Windows Firewall with
Advanced Security. The onboard encryption engine on the AT-2712FX/SC
and AT-2912T adapters allows off-loading of this task to the network
controller instead of the host CPU, thereby freeing the host CPU for other
important tasks. The off-loading feature is unique in the industry and
enables you to set tight security efficiently within your network at a minimal
cost.
Microsoft’s Technet website, www.technet.microsoft.com, offers several
technical publications as well as online seminars that describe Vista’s
advanced IPSec and Firewall features and their implementation. These
topics are beyond the scope of this chapter. Instead, Allied Telesis
recommends that you consult Technet for additional information.