Our IPSECCompliance Checker

• We built a simple compliance checking-based IPSEC system (SA & packet policies)

• Distributed with OpenBSD 2.6, also works under Linux

  • Everything new is implemented in isakmpd

• SA Policies are written in KeyNote

  • controls SA creation and tests packet policies

• Packet Policies are garden-variety filters

  • control what can flow through the SA

Previous slide

Next slide

Back to first slide

View graphic version