Issue# 1-Security Policy Definition

["Abdallah Rayhan" <arayhan@xxxxxxxxxxxxxxxxxx>]

Issue# 1-Security Policy Definition

What is the policy that we are trying to address here?

   1-Is it a pre-IKE/IPSec initialization process, e.g,
     the SA parameters needed to make IKE/IPSec run
     smoothly (pre-IKE interoperability)?

   2-Resolving the tunneling issues of IKE/IPSec? e.g.,
     how to build IPSec tunnels across multiple gateways?

   3-Defining IPsec-gateway traversal policy? e.g.,
     allow certain policy (filtering rules) to be
     defined on the fly and enforced on the IPSec
     packets traversing certain gateways (open
     pinholes in the gateway for particular
     applications)!

   4-Providing low-level policy infrastructure to
     facilitate installing network (high-level) policies
     into network devices? In this case, what is the
     difference between the two? e.g, provisioning,
     and how to map the two?

Comments?


Abdallah Rayhan