[Agenda] [Characteristics] [Architecture] [Results] [Conclusion] [Resources]

Conclusion (1/2)

Complicated to get it work, lots of small time-consuming problems, but IPsec works

IKE works with pre-shared secrets, or one-vendor only

Examples: ANX, ENX

Interoperability is there but is far from vendors claims

IKE interoperability with certificates is not yet a reality

Complete prototyping is always mandatory before deployment with different implementations

Troubleshooting is very hard and time-consuming

No global managment is possible with multiple vendors

No scalability in this situation

IPsec is more complete and better than proprietary protocols

Our first experience with IPsec interoperability was rather difficult

® © Hervé Schauer Consultants October 1999 - 142, rue de Rivoli - F-75001 Paris - France Phone: +33 141 409 700 - Fax: +33 141 409 709 - Email: <secretariat@hsc.fr>

- Page 21 -