Chapter 1:

Course Introduction-
Standard introduction to Course

Cryptography Concepts

-Basic Cryptography

Concepts

-Symmetric Key

Cryptography

-Symmetric Key Algorithms

-Asymmetric Key Cryptography

-Asymmetric Algorithms

-Cryptanalysis and

Cryptographic Strength

IPSec VPNs and PKI

-Public Key Infrastructure

-Digital Signatures

-Digital Certificates

-Why Combine IKE and a PKI?

-X.509 Digital Certificates

-Common X.509 Extensions

-Types of Certificates

-IPSec Certificates

-Certificate Acquisition and Management

-IKE Support for PKI

-The Future of IKE and PKIs

ntroduction to Virtual Private Network

  Technologies

-Private Data Networks

-Pros and Cons of Private Data Networks

-Public Data Networks

-Pros and Cons of Public Data Networks

-Vulnerability 1:

-Eavesdropping

-Vulnerability 2: Session Hijacking

What is a VPN? What is a Virtual Private Network?

-Data Link Layer VPNs

-Network Layer VPNs

-Transport Layer VPNs

-Application Layer VPNs

-Making a Decision

 The IPSec Protocol

-The IPSec Standard

-The IPSec Protocols

-IPSec Protocol Modes

-Authentication Header

-Encapsulating Security Payload

-Combining Protocols

-Support for Both AH and ESP

-Security Associations

-IPSec Key Generation

-IPSec Difficulties

-IPSec Specifications

 Designing VPN Solutions

-The Discovery Process

-Step 1: Identify Goals and Objectives

-Step 2: Understand Requirements

-Step 3: Design The Right Architecture

-Step 4: Select The Right Technology

Step 5: Select The Right Vendors

-Executing the Implementatio

 Secure VPNs

-Secure Virtual Private Networks

-VPN Services

-Confidentiality

-Integrity

-Authentication

Key Management for IPSec

-Manual Key Exchange

-Automated Key Exchange

-ISAKMP Framework

-Internet Key Exchange

-IKE Exchanges

-IKE Exchanges - Phase 1

-IKE Peer Authentication

-IKE Exchanges - Phase 2