Executive Summary: To defend against malware outbreaks, many enterprises implement Server and Domain Isolation (SDI) using IPsec to limit access to their key Microsoft Windows servers and networks. However, some enterprises maintain a heterogeneous environment of Microsoft Windows, UNIX, and Linux systems. Here's a step-by-step guide on how to extend SDI to FreeBSD, Linux, and Sun's Solaris 10 by using IPsec with preshared keys as the authentication method. |
Many enterprises proactively defend against malware outbreaks by limiting access to their key Windows servers and networks. One popular defense is Server and Domain Isolation (SDI) using IPsec. SDI is easy to implement in Windows environments. However, some enterprises maintain a heterogeneous environment of Windows, UNIX, and Linux systems. Fortunately, you can extend SDI to UNIX and Linux systems. . . .