Digital Certificates and IPSEC

[DV37201]

I was wondering if anyone here is using certificates to enhance IPSEC security. The decision I need to make is wether to use a 3rd party CA source like Verisign, or to use an in house 2k machine for my CA server. Any suggestions/ experiences would be appreciated. Thanks.

Brian

 

[jlavin]

I think you should use verisgin. We have been mulling over the situation as well.
John

 

[DV37201]

Good to see someone is in the same boat. I am going to try the 2k server approach since I have some time to work with it. The problem is that Cisco doesn't have any info on how to configure CA on the 2k machine, which is understandable. And Microsoft's info on CA configuration is also sparse. I will let you know if I can get this to work.