Hi Fred. Admittedly, security remains [to me, at least] among the most nebulous of parameters when considering VPNs because of the diversity in the means by which they (VPNs) are being provisioned by the NSPs, and the unresolved standards work in this space. Here, I am not only referring to the standards of IPSec, or any of the other intrinsically security-minded protocols alone, but to the manner in which they will be applied to many of the emerging 'net services over IP which fall under the heading of convergence (of legacy services such as voice, fax, conferencing of all types, etc.), and how they will meld with the new security-focused RFCs that are now in the works at the IETF, as well.
I would prefer that someone else with better insights into security matters provide you with something sound, rather than I providing you with something that is only half baked at this time. Anyone?
Regards, Frank Coluccio |