There is an articles on www.microsoft.com/serviceproviders/
columns/using_ipsec.asp, explaining how to use IpSec to lock down a server.
I did what is said on that document. However, it seems to me that IpSec can
only filter traffic based on IP.  If I do it based on port, it does not
work... I am using Windows 2003 standard edition.

Am I doing something wrong or IpSec can only wrok on a IP base?

[ Post a follow-up to this message ]

It can filter based on IP, different protocols (TCP, UDP) and/or their port
numbers...

But I do admit that in most cases, it takes a bit to get the policy right
for it to work :-).

--
Mike
Microsoft MVP - Windows Security

"Guoqi Zheng" <no@sorry.com> wrote in message
news:O0cOv62DFHA.328@tk2msftngp13.phx.gbl...
> There is an articles on www.microsoft.com/serviceproviders/
> columns/using_ipsec.asp, explaining how to use IpSec to lock down a
> server.
> I did what is said on that document. However, it seems to me that IpSec
> can
> only filter traffic based on IP.  If I do it based on port, it does not
> work... I am using Windows 2003 standard edition.
>
> Am I doing something wrong or IpSec can only wrok on a IP base?
>
>

[ Post a follow-up to this message ]