HP-UX Security Features - OpenMPE

HP-UX IPSec Features (continued)
• Host-based authentication: pre-shared keys or digital
certificates (via Baltimore, OpenSSL, or Verisign PKI).
Certificates are obtained programmatically (autoenrollment)
for Verisign and via “face-to-face” enrollment
for Baltimore.
• CLI for IPSEC policy configuration.
• Includes policy defaults for ease of config.
• Flexible rule-based security attribute & access control
policy configurations. Allows combinations of IP
addresses, subnet mask, ports, protocols …
• Diagnostic & monitoring tool. Logging & audit trail for
accountability & intrusion alerts
Network Security – Products and Features
August 26, 2004 61