WSM User Guide - WatchGuard Technologies

Tunneling ProtocolsVirtual private networks (VPNs) use encryption technology to decrease security risks, and to secure privateinformation on the public Internet. A virtual private network lets data flow safely across the Internetbetween two networks. VPN tunnels can secure connections between a host and a network.The networks and hosts at the endpoints of a VPN can be corporate headquarters, branch offices, andremote users.VPN tunnels use authentication, which examines the sender and the recipient. If the authenticationinformation is correct, the data is decrypted. Only the sender and the recipient of the message can readit clearly.For more information on VPN technology, see the online information at:http://www.watchguard.com/supportThe WatchGuard® Support web site contains links to documentation, basic FAQs, advanced FAQs, andthe WatchGuard User Forum. You must log in to the Technical Support web site to use some features.Tunneling ProtocolsTunnels allow users to send data in secure packets across a network that is not secure, usually the Internet.A tunnel is a group of security protocols, encryption algorithms, and rules. The tunnel uses thisinformation to send secure traffic from one endpoint to the other. A tunnel allows users to connect toresources and computers from other networks.Tunneling protocols supply the infrastructure and set how the data transmission on the tunnel occurs.The two tunneling protocols that WatchGuard® System Manager supports are Internet Protocol Security(IPSec) and Point-to-Point-Tunneling Protocol (PPTP). WatchGuard also supports SSL VPN with its Watch-Guard SSL VPN Firebox product line.IPSecYou use the IPSec protocol to examine IP packets and make sure they are authenticated. IPSec includessecurity features including very strong authentication to protect the privacy of the information that youtransmit on the Internet. IPSec is a standard that works with many systems from different manufacturers.IPSec includes two protocols that protect data integrity and confidentiality. The AH (AuthenticationHeader) protocol is the solution for data integrity. The ESP (Encapsulated Security Payload) protocolgives data integrity and confidentiality.PPTPPoint to Point Tunneling Protocol (PPTP) is a standard for VPN security that can be used with many systemsfrom different manufacturers. PPTP allows tunnels to corporate networks and to other PPTPenabledsystems. PPTP is not as secure as IPSec and cannot secure two networks. PPTP can only secureone IP address with one other IP address or with a network. PPTP supplies an inexpensive tunnel alternativefor a corporate network that is easier to use than IPSec.EncryptionOn a network that is not secure, hackers can find transmitted packets very easily. VPN tunnels useencryption to keep this data secure.226 WatchGuard System Manager