1. When two parties want to communicate in both directions using IPsec, how many Security Associations(SA)...

Transcribed Image Text:

1. When two parties want to communicate in both directions using IPsec, how many Security Associations(SA) need to be established? Explain what SAS specify. 2. IPsec policies determine the security processing that should be applied to an IP datagram. IPsec- aware hosts have a Security Policy Database (SPD). i. What is the purpose of this Security Policy Database (SPD)? ii. Examine the implications of tunnelling through IP (outer header may not contain the final destination of the packet) on the design of a network that uses a packet filtering firewall. Suggest an effective way to deal with such packets. iii. Why does IPsec have a problem with NAT firewalls? 1. When two parties want to communicate in both directions using IPsec, how many Security Associations(SA) need to be established? Explain what SAS specify. 2. IPsec policies determine the security processing that should be applied to an IP datagram. IPsec- aware hosts have a Security Policy Database (SPD). i. What is the purpose of this Security Policy Database (SPD)? ii. Examine the implications of tunnelling through IP (outer header may not contain the final destination of the packet) on the design of a network that uses a packet filtering firewall. Suggest an effective way to deal with such packets. iii. Why does IPsec have a problem with NAT firewalls?