Legacy Update: Get back online, activate, and install updates on your legacy Windows PC

This paper describes how to configure Microsoft® Windows® 2000 IPSec and Windows XP IPSec to help secure an internal corporate network server against network-based attacks from untrusted computers. You can significantly enhance the ability of a server to defend against such attacks by requiring IPSec-authenticated, signed, and encrypted communication between computers. This paper describes the security threats to, and the benefits of using IPSec on, an internal corporate network server and uses a scenario to describe the process of IPSec policy design for an internal corporate network. Although the focus of this paper is Windows 2000 and Windows XP IPSec, it also provides information about IPSec functionality enhancements in Windows 2000 service packs and in the Microsoft® Windows Server™ 2003 family.
Microsoft Corporation and Foundstone Strategic Strategy coauthored this paper. The Windows product development team and the Microsoft IT security group customized the IPSec policy design described in this paper for use on an operational basis, during the development of Windows 2000, and they continue to use these policies today. Foundstone evaluated the security that the IPSec policies provide against a sophisticated, untrusted attacker, in laboratory environments.

Files

Status: Deleted This download is no longer available on microsoft.com. The downloads below are archives provided by the Internet Archive Wayback Machine from the Microsoft Download Center prior to March 2015.

No files found

File sizes and hashes are retrieved from the Wayback Machine’s indexes. They may not match the latest versions of files hosted on Microsoft servers.

Microsoft Word or Word Viewer

1. Click the Download link to start the download.
2. Do one of the following:

• To start the installation immediately, click Open or Run this program from its current location.
• To copy the download to your computer for installation at a later time, click Save or Save this program to disk.