Skip to content

IPsec

What is IPsec?

A suite of protocols that authenticates and encrypts IP packets to secure communications over IP networks, commonly used in VPN implementations.

Information Security

Terms that appear alongside ipsec

Each of these is named in at least one of the same controls as ipsec. The number is how many controls name both.

Frameworks that govern ipsec

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →CIS Controls v8View framework →

What the standards actually require on ipsec

Requirements naming ipsec across 6 standards, quoted from the control text.

Australian Information Security Manual6 controls

Tunnel mode is used for IPsec connections; however, if using transport mode, an IP tunnel is used.

ISM-0494 · IPsec tunnel mode →
NIST SP 800-1873 controls

Protect the S1 interface between eNodeB and EPC using IPsec in tunnel mode where the backhaul traverses untrusted networks. Use certificate based authentication with a dedicated PKI and rotate credentials on a defined cadence.

SP800-187-3.6 · Backhaul Protection with IPsec →
New Zealand Information Security Manual (NZISM)3 controls

Agencies should choose HMAC-SHA256, HMAC-SHA384 or HMAC-SHA512 as their HMAC algorithm.

new-zealand-information-security-manual-nzism::17.8.14.C.01 · 17.8.14.C.01 Approved HMAC algorithms for IPSec →
O-RAN WG11 Security Specification2 controls

Implement cryptography + protocol security + PKI per O-RAN WG11 Security Requirements covering TLS + SSH + IPsec + certificate lifecycle.

ORANWG11-3 · Cryptography, TLS, SSH, IPsec, and PKI Lifecycle Management →
CCSDS 350.0-G-3 - Space Communications Security (Consultative Committee for Space Data Systems)1 control

350.0-G-3 sec.5.4: applying security at the network layer (e.g. IPSec) for IP-based space and ground communications.

CCSDS350-5.4 · Network Layer Security (IPSec) →
ITU-T X.805 - Security Architecture for End-to-End Communications5 controls

Security Dimension 2 Authentication per X.805 Clause 6.2: Authentication confirms that each party to a communication (for example a person, device, service or application) really is who it claims to be, and gives assurance that no party is impersonating anothe...

X805-Dim2-Authentication-Identity-Verification-Claimed-Identities-Entities-Communication · ITU-T X.805 Security Dimension 2 - Authentication + Identity Verification + Claimed Identity + Entity Authentication + Data Origin Authentication + Mutual Authentication + Multi-Factor + Cryptographic Authentication →

Questions people ask about ipsec

What is IPsec?
A suite of protocols that authenticates and encrypts IP packets to secure communications over IP networks, commonly used in VPN implementations.
Why is IPsec important for compliance?
IPsec is a key concept in Information Security. Understanding ipsec helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address IPsec?
IPsec appears in the requirement text of Australian Information Security Manual, NIST SP 800-187, New Zealand Information Security Manual (NZISM), O-RAN WG11 Security Specification, CCSDS 350.0-G-3 - Space Communications Security (Consultative Committee for Space Data Systems). Across these standards we have identified 20 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about IPsec?
Explore our compliance framework pages to see how ipsec applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how IPsec applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.