IPsec
Internet protocolWikipedia
46
MENTIONS
19
EPISODES
17
PODCASTS
Search complete. 46 mentions across 19 episodes found for "IPsec".
Sep 18, 2026
Bill DockeryGUEST
If you put it in terms of that one, it's just going to take longer to do.
Bill DockeryGUEST
And then when you consider some of these keys, if you tried to send this as a singular packet, the MTU sizes in places, if you send this across, you know, like a carrier network and it's dropping packets because it doesn't like the fragmentation on UDP, because some of this stuff does run on UDP, you see IPsec fail,
Drew Conry-MurrayHOST
right?
Bill DockeryGUEST
So yeah, exactly.
10 MINS LATER
Bill DockeryGUEST
But acting as a router, where does encryption show up? So I got a router, MACsec is a great one.
Bill DockeryGUEST
You hit it on the head, right? I'm terminating an
Scott RobohnHOST
IPsec tunnel or a MACsec tunnel on the router somewhere.
Scott RobohnHOST
And hopefully it's on hardware in a dedicated
Bill DockeryGUEST
If you put it in terms of that one, it's just going to take longer to do.
Bill DockeryGUEST
And then when you consider some of these keys, if you tried to send this as a singular packet, the MTU sizes in places, if you send this across, you know, like a carrier network and it's dropping packets because it doesn't like the fragmentation on UDP, because some of this stuff does run on UDP, you see IPsec fail,
Drew Connery-MurrayHOST
right?
Bill DockeryGUEST
So yeah, exactly.
10 MINS LATER
Bill DockeryGUEST
But acting as a router, where does encryption show up? So I got a router, MACsec is a great one.
Bill DockeryGUEST
You hit it on the head, right? I'm terminating an
Scott RobohnHOST
IPsec tunnel or a MACsec tunnel on the router somewhere.
Scott RobohnHOST
And hopefully it's on hardware in a dedicated
Bill DockeryGUEST
If you put it in terms of that one, it's just going to take longer to do.
Bill DockeryGUEST
And then when you consider some of these keys, if you tried to send this as a singular packet, the MTU sizes in places, if you send this across, you know, like a carrier network and it's dropping packets because it doesn't like the fragmentation on UDP, because some of this stuff does run on UDP, you see IPsec fail,
Drew Conry-MurrayHOST
right?
Bill DockeryGUEST
So yeah, exactly.
10 MINS LATER
Bill DockeryGUEST
But acting as a router, where does encryption show up? So I got a router, MACsec is a great one.
Bill DockeryGUEST
You hit it on the head, right? I'm terminating an
Scott RobohnHOST
IPsec tunnel or a MACsec tunnel on the router somewhere.
Scott RobohnHOST
And hopefully it's on hardware in a dedicated
Sec GuyHOST
This is data moving over the network.
Sec GuyHOST
We protect this with TLS or IPSec.
Sec GuyHOST
And three, data in use.
Sec GuyHOST
This is data currently in your RAM or CPU.
James MesserHOST
The MIBs never go down to that file level, so it has no way to monitor individual files.
James MesserHOST
And then lastly, IPsec.
James MesserHOST
IP security, which describes a set of protocols that are used commonly to tunnel information across an encryption or a VPN-type tunnel between sites.
James MesserHOST
This becomes pretty useful if you are connecting two sites together, site to site, and you want to encrypt all the data going between those locations.
James MesserHOST
That is a very common and perfect use for IPsec and IPsec tunnels.
James MesserHOST
IPsec tunnels have nothing to do with monitoring individual files or determining if any of those files have changed.
James MesserHOST
Therefore, that would not be the answer we're looking for.
James MesserHOST
The one here, the only answer that makes any sense is the FEM.
Keith TokashGUEST
Get them on there.
Keith TokashGUEST
Get two FTDs to start and build an IPsec tunnel between them.
Drew Connery-MurrayHOST
Ah.
Keith TokashGUEST
And then, then build, like, a, a Get VPN tunnel, and then, you know, j- just work through all the technology so that you understand the FTD.
20 MINS LATER
Drew Connery-MurrayHOST
[laughs]
Keith TokashGUEST
Uh, just im- w- all the time that I was taking, I'm reading and I'm writing, uh, other things, but, you know, after a few months of that, I'm going to ignore the actual study material, study how to build a lab, do that, and then I'm just gonna, I'm just gonna play in the mud like, like a happy little boy.
Keith TokashGUEST
And, and, you know, I'm gonna learn how to do the things that I was reading about because it's actually... it's, you know, it's a lot more satisfying as well to, to get those FTDs up, even if they're just virtualized on one box in the other room, and build that IPsec tunnel.
Keith TokashGUEST
And then, you know, I, I don't know how many ti- how many people remember their, um...
Keith TokashGUEST
But, you know, after a few months of that, I'm going to ignore the actual study material, study how to build a lab, do that, and then I'm just gonna, I'm just gonna play in the mud like, like a happy little boy.
Keith TokashGUEST
And, and, you know, I'm gonna learn how to do the things that I was reading about because it's actually... it's, you know, it's a lot more satisfying as well to, to get those FTDs up, even if they're just virtualized on one box in the other room, and build that IPsec tunnel.
Keith TokashGUEST
And then, you know, I, I don't know how many ti- how many people remember their, um...
Keith TokashGUEST
the first time they, they, they messed around with two Cisco routers and configured loopback addresses on two routers and then advertised them into a protocol, and then you could ping across the, the direct connection, and it was like, "Oh, oh, I did something." Right?
Keith TokashGUEST
Get them on there.
Keith TokashGUEST
Get two FTDs to start and build an IPsec tunnel between them.
Drew Connery-MurrayHOST
Ah.
Keith TokashGUEST
And then, then build like a, a get VPN tunnel, and then, you know, j- just work through all the technology so that you understand the FTD.
20 MINS LATER
Keith TokashGUEST
It, it...
Keith TokashGUEST
All the time that I was taking, I'm reading and I'm writing, uh, other things.
Keith TokashGUEST
But, you know, after a few months of that, I'm going to ignore the actual study material, study how to build a lab, do that, and then I'm just gonna, I'm just gonna play in the mud like, like a happy little boy, and, and, you know, I'm gonna learn how to do the things that I was reading about because it's actually... it's a... you know, it's a lot more satisfying as well to, to get those FTDs up, even if they're just virtualized on one box in the other room, and build that IPsec tunnel.
Keith TokashGUEST
And then, you know, I, I don't know how many ti- how many people remember their, um...
JoséeHOST
Right.
JoséeHOST
They would establish an IPsec tunnel.
JoséeHOST
And critically, the enterprise would have had to punch a hole in their perimeter, exposing inbound firewall ports to the public internet just to accept that tunnel connection.
Ernie PrescottHOST
Which is terrifying.
PhoneboyHOST
And we actually did a tech talk on this back in July, which is, uh, linked in the show notes.
PhoneboyHOST
Now, we also offer Smart Console's single-click IPsec tunnel setup between a Check Point Firewall and Check Point SASE.
PhoneboyHOST
And this provides best practices for both full mesh and hub-and-spoke topologies and supports, uh, policy-based and route-based modes.
PhoneboyHOST
On the SD-WAN front, we now offer dynamic routing, uh, with equal-cost multi-path, uh, s-backhaul data center failover for local breakout link degradation, layer two overlay support, simplified carrier grade NAT configuration.
9 more episodes mention IPsec.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.