Microsoft Vista offers tremendous opportunity for organizations to improve network security by limiting access at the operating system level. With native support for the IPsec protocol and new facilities for creating IPsec-based group policies within Active Directory, Microsoft has made network security an integral part of the operating system. Thanks to these new capabilities, organizations can now employ server and domain isolation (SD&I), a powerful security technique that logically separates computers to ensure that only “trusted” computers can communicate. Using SD&I, IT executives and security managers can manage security policy at the operating system level through the authentication and, optionally, encryption of client-to-client, client-to-server, and server-to-server communications.

At ES.

[ Read more ]