Contents
What do you need to know about an IPSec policy?
For more information on AuthIP, see also: An IPsec policy is a set of rules that determine which type of IP traffic needs to be secured using IPsec and how to secure that traffic. Only one IPsec policy is active on a computer at one time.
How to configure IPsec in Win32 apps?
Application developers may configure IPsec directly using the WFP API, in order to take advantage of a more granular network traffic filtering model than the model exposed through the Microsoft Management Console (MMC) snap-in for Windows Firewall with Advanced Security.
How to get an IPsec rule from a target computer?
Gets an IPsec rule from the target computer. The Get-NetIPsecRule cmdlet returns the instances of IPsec rules that match the search parameters from the user. See the New-NetIPsecRule cmdlet for more information.
What is the default value for the IPsec parameter?
This parameter specifies the session key lifetime for an IPsec rule, in minutes. The acceptable values for this parameter are: 78 through 172799. The default value is 0 minutes. When managing a Group Policy Object (GPO), the default setting is NotConfigured. This parameter is only supported on Windows Server 2012.
How to create an IPSec policy in Win32?
To learn more about implementing IPsec policies, open the Local Security Policy MMC snap-in (secpol.msc), press F1 to display the Help, and then select Creating and Using IPsec Policies from the table of contents. For more information on IPsec policies, see also:
Can a Secure Socket be used for IPsec?
AuthIP can be used with secure sockets to implement application-based IPsec secured traffic. It provides: Per-socket authentication and encryption. See WSASetSocketSecurity for more information. Client impersonation. (IPsec impersonates the security context under which the socket is created.)
How does the keying module in IPsec work?
The keying module enumerates the policy provider contexts based on the traffic characteristics and obtains the policy to use for the security negotiation.