From: stefan vogt (stefan-uwe_vogt@web.de)
Date: Sat Dec 17 2005 - 12:21:18 GMT-3
Hello all,
There is an excellent white paper regarding this topic on CCO:
http://www.cisco.com/web/about/security/security_services/ciag/documents/v6-v4-threats.pdf
---quote---
IPv6 [1] security is in many ways the same as IPv4 [2] security. The basic mechanisms for transporting
packets across the network stay mostly unchanged, and the upper-layer protocols that transport the actual
application data are mostly unaffected. However, because IPv6 mandates the inclusion of IP Security
(IPsec) [3], it has often been stated that IPv6 is more secure than IPv4. Although this may be true in an
ideal environment with well-coded applications, a robust identity infrastructure, and efficient key
management, in reality the same problems that plague IPv4 IPsec deployment will affect IPv6 IPsec
deployment.
---quote---
Merry Christmas to all of you.
Stefan-Uwe
CCIEin2006 <ciscocciein2006@gmail.com> schrieb am 16.12.05 07:00:03:
>
> Not exactly,
>
> The only reason he may believe that IPv6 is more secure is because IPSEC
> functionality is built into the protocol (you don't necessarily have
> to enable it though) whereas in IPv4 IPSEC is an add on feature. They pretty
> much do the same thing though.
>
> One thing I don't understand regarding IPv6 is they say it is better than
> IPv4 because it gives true "end-to-end communication" and no longer requires
> NAT on the internet. But if thats true don't you lose the security benefits
> that NAT gives by hiding the inside addresses?!?
>
> Maybe the experts like Scott or the Brians can comment?
>
> On 12/14/05, Bobby Acker <aggiebob98@yahoo.com> wrote:
> >
> > A coworker made a claim yesterday that IPv6 was more secure than IPv4. I
> > can think of a few instances were this might be the case. Does anyone have
> > opinions on this and why this would or would not be true?
> >
> > Bobby
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
This archive was generated by hypermail 2.1.4 : Mon Jan 09 2006 - 07:07:51 GMT-3