IPSec, the standard, is not a firewall. However, the Windows implementation of IPSec does provide firewall capability (albeit seemingly by accident), and can be used as a firewall. It's not an amazingly advanced firewall, but it can filter and block traffic according to protocol, port number, IP address, etc. It won't track TCP connections or FTP sessions, but it will block port 139 if you tell it too, and that's definatly better than nothing.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/190/23153#23153