quote:

---

Originally posted by eljefe79
Hey SKA

I just finished reading the entire Syngress\Osborne Book by the Shinder's and it's pretty good. I was putting together a formal review but here are my tentative thoughts on it

It's much better than those darn microsoft manuals..it's both informative and an easy read. The only fault that I've seen so far are the occaisional Kart before the horse situations that have left me scratching my head. Truly, I'm big on the ergonomics of learning. I'm wondering if the format of the book would be better served by starting with the composite services such as Protocals. Communications overview, TCP\IP,DHCP, DNS, IPSEC then the various services

Major Issues

Chapter Five: RAS and IAS

This is the first major speedbump that I've hit. We're discussing integral aspects of VPN related to IPSEC\Cerificate services and Encryption which have left me somewhat confused. I believe that the subject matter would sink in a little better if this section followed the Certificate and security overview. Additionally, when discussing the differences in PPTP vs. L2TP, it be nice to have a compare and contrast chart available as a guide. It'd be great to include dependency services ie L2TP requires Certificate services.

Chapter Seven: OBjective 7.01

I'm finding that it is difficult to understand what protocols and processes are related to the different phases of IPSEC\secure channel communications. Are we talking of separate process or the same process just another stage? It would be extremely helpful to have a step by step flow chart in place that would give an outline to the process from start to finish. I'm going to have to resort to other sources here to solve this difficiency.

IPSEC Tunneling refers to creating 2 rules but the description shows only one and the tunnel endpoint I assume is going to be the external adapeter of the hosts gateway? This requires clarification? pg 499

Certificate services information is pretty basic.

Hope this is helpful,

---