Server and Domain Isolation Using IPsec and Group Policy
Server and domain isolation make it possible to create a layer of security to achieve logical isolation of the network traffic that moves between computers or networks. If an attacker manages to gain physical access to a company’s internal network and attempts to access a server that contains valued data assets, server and domain isolation can block access simply because the computer that the attacker is using is not a trusted company device, even if the attacker used a valid user account and password.
The logical isolation approach using server and domain isolation techniques enables the development of a flexible, scalable, and manageable isolation solution that provides the security of isolation without the cost or inflexibility of physical boundaries.
http://www.microsoft.com/technet/security/guidance/architectureanddesign/ipsec/ipsecch1.mspx
Leave a Reply
You must be logged in to post a comment.