Describe ip protocol security pros and cons. Solution IP Protocol Security: Internet Protocol Security ( IPsec ) is a protocol suite for secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec can be used in protecting data flows between a pair of hosts ( host-to-host ), between a pair of security gateways ( network-to-network ), or between a security gateway and a host ( network-to-host ). Security architecture: Pros of IPsec: ·Security at the Network Layer Level - Being based at the network level, this technology is completely invisible in its operation . The end users are never required to learn about it, and neither do they ever directly interact with it. This in itself is an added layer of security for the VPNs running on IPsec. ·No Application Dependence - While SSL-/ SSH-/ PGP-based VPNs are application-dependent, IPsec-based VPNs do not need to worry about application dependence. Since the entire security system is implemented at the network level, there are no application compatibility issues. Cons of IPsec: ·CPU Overhead - Having to perform encryption and decryption on the hundreds of megabytes of data flowing through the machines requires quite a bit of processing power, and this translates to higher processor loads . ·Compatibility Issues - IPsec is a standardized solution today, and yet, some large software developers may not adhere to it, and may go ahead with standards of their own. As a result, this can lead to compatibility issues . ·Broken Algorithms - Some of the security algorithms that are still being used in IPsec have already been cracked. This poses a huge security risk, especially if the network administrators unknowingly use those algorithms instead of newer, more complex ones that are already available. .

1. Describe ip protocol security pros and cons.
Solution
IP Protocol Security:
Internet Protocol Security ( IPsec ) is a protocol suite for secure Internet Protocol (IP)
communications by authenticating and encrypting each IP packet of a communication session.
IPsec can be used in protecting data flows between a pair of hosts ( host-to-host ), between a pair
of security gateways ( network-to-network ), or between a security gateway and a host ( network-
to-host ).
Security architecture:
Pros of IPsec:
·Security at the Network Layer Level - Being based at the network level, this technology is
completely invisible in its operation . The end users are never required to learn about it, and
neither do they ever directly interact with it. This in itself is an added layer of security for the
VPNs running on IPsec.
·No Application Dependence - While SSL-/ SSH-/ PGP-based VPNs are application-
dependent, IPsec-based VPNs do not need to worry about application dependence. Since the
entire security system is implemented at the network level, there are no application compatibility
issues.
Cons of IPsec:
·CPU Overhead - Having to perform encryption and decryption on the hundreds of megabytes
of data flowing through the machines requires quite a bit of processing power, and this translates
to higher processor loads .
·Compatibility Issues - IPsec is a standardized solution today, and yet, some large software
developers may not adhere to it, and may go ahead with standards of their own. As a result, this
can lead to compatibility issues .

2. ·Broken Algorithms - Some of the security algorithms that are still being used in IPsec have
already been cracked. This poses a huge security risk, especially if the network administrators
unknowingly use those algorithms instead of newer, more complex ones that are already
available.