Developing Your Deployment Model

In order to use Intel Packet Protect successfully, you must develop a deployment model that fulfills your security needs on your network. There are several stages to consider in developing your deployment model.

Review your network architecture and corporate security guidelines.
Assign security behavior roles to systems that you want to use Intel Packet Protect.
Develop a strategy for using pre-shared keys.
Enable certificate support
Understand the default rule.
Create Additional Rules
Understand maintenance and performance trade-offs

This discussion represents only an overview of some of the issues to be considered when deploying Intel Packet Protect in your enterprise. For more detailed information about deployment models, please refer to "Scalable Deployment of IPSec in Corporate Intranets" white paper from the Intel Architecture Labs Internet Building Blocks Initiative. This white paper can be found at:

ftp://download.intel.com/ial/home/ibbi/ipsec_122.pdf