Re : VPN over VSAT Link

[soul <soul1273 () yahoo fr>]

I have the same opinion but some people in my organization think that VSAT or satellite link is secure so there is no 
need to encrypt.
So i am trying to convince them that our security should not be handled by VSAT or satellite provider. So we need to 
secure our VSAT network in order to secure the communication end to end with our field offices.

We have implement a proof of concept  LAN-to-LAN IPSec VPN solution with cisco PIX router between one field office and 
the Headquater. It is working fine but the question is now about return on investment and performance issue. They want 
us to justify the investment and if there will be performance issue.

any advice?

thank you



----- Message d'origine ----
De : Lee Hilt <lhilt () mbc edu>
À : soul <soul1273 () yahoo fr>; security-basics () securityfocus com
Envoyé le : Jeudi, 14 Février 2008, 18h24mn 13s
Objet : RE: VPN over VSAT Link

in my opinion, even though the traffic originates in a non-traditional way
(I.E. not "on the wire") it eventually gets there. LOGICALLY all traffic is
"On the wire" so despite the originization, the traffic is subject to
sniffing... so I would say if you have any sensitive assets, some sort of
traffic encryption would be needed


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of soul
Sent: 2008-02-14 9:08
To: security-basics () securityfocus com
Subject: VPN over VSAT Link

Dear ALL

My company have 15 field offices connected by a VSAT Network and all the
applications are centralised in the Headquater. We are discussing about the
need to have IPSec VPN LAN-2-LAN over VSAT transactions and access to
applications between field offices and Headquater.

Is it necessary to have encryption over satellite link?

thank you.



____________________________________________________________________________
_
Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail
http://mail.yahoo.fr


      _____________________________________________________________________________ 
Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail http://mail.yahoo.fr