Looking for encryption for ethernet link between 2 firewalls

peter-net · ‎12-01-2008

We have an ASA 5500 linked to another site about a mile away (via extended ethernet fibre). We need some encryption on this link - typically AES. Is the only way to encrypt to use IPSEC/VPN Or can we encrpty the traffic in "less complex" way. Issues of performance matter too as there will be voice and time-critical apps running over this line too

andrew.prince · ‎12-01-2008

The only wya you can encrypt the traffic is via some kind of VPN.

HTH>

cisco24x7 · ‎12-01-2008

Not entirely true. You can place a hardware

crypto on both ends. Think of it like

encrypting the microwave signal. Doesn't have

to be VPN.

peter-net · ‎12-01-2008

OK - I cant do a hardware option. So if I discount that - we are saying - either go for VPN solution - or not have encryption between the 2 locations ?

cisco24x7 · ‎12-01-2008

You can approach the problem this way:

Option #1: VPN

Option #2: encrypt at the application level

with either SSH or SSL encryption

Either way, the communication will be secure.