IPSEC Domain Isolation: A Test Study
Our names are David Pracht and Steve Martin. As Networking Support Professionals at Microsoft we support IPSec but historically it has not been a high call generator. We designed this lab to explore an increasingly popular scenario – IPSec Domain Isolation. While it can be the most difficult scenario to deploy it is also very tempting to have the ability to protect all the traffic in your network without requiring specific application support. The reality is somewhere in between and we wanted to see if we could identify where people might encounter issues and document in a series of posts any problems we uncover while attempting to setup this scenario.