Skip to content

IPsec

What is IPsec?

A suite of protocols that authenticates and encrypts IP packets to secure communications over IP networks, commonly used in VPN implementations.

Information Security

Terms that appear alongside ipsec

Each of these is named in at least one of the same controls as ipsec. The number is how many controls name both.

Frameworks that govern ipsec

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →CIS Controls v8View framework →

What the standards actually require on ipsec

Requirements naming ipsec across 6 standards, quoted from the control text.

Australian Information Security Manual5 controls

Tunnel mode is used for IPsec connections; however, if using transport mode, an IP tunnel is used.

ISM-0494 · Tunnel mode is used for IPsec connections; however, if using transport mode, an IP tunnel →
NIST SP 800-1873 controls

Protect the S1 interface between eNodeB and EPC using IPsec in tunnel mode where the backhaul traverses untrusted networks. Use certificate based authentication with a dedicated PKI and rotate credentials on a defined cadence.

SP800-187-3.6 · Backhaul Protection with IPsec →
O-RAN WG11 Security Specification2 controls

Implement cryptography + protocol security + PKI per O-RAN WG11 Security Requirements covering TLS + SSH + IPsec + certificate lifecycle.

ORANWG11-3 · Cryptography, TLS, SSH, IPsec, and PKI Lifecycle Management →
CCSDS 350.0-G-3 - Space Communications Security (Consultative Committee for Space Data Systems)1 control

350.0-G-3 sec.5.4: applying security at the network layer (e.g. IPSec) for IP-based space and ground communications.

CCSDS350-5.4 · Network Layer Security (IPSec) →
ITU-T X.805 - Security Architecture for End-to-End Communications5 controls

Security Dimension 2 Authentication per X.805 Clause 6.2: Authentication ensures the validity of the claimed identities of the entities participating in communication (e.g.

X805-Dim2-Authentication-Identity-Verification-Claimed-Identities-Entities-Communication · ITU-T X.805 Security Dimension 2 - Authentication + Identity Verification + Claimed Identity + Entity Authentication + Data Origin Authentication + Mutual Authentication + Multi-Factor + Cryptographic Authentication →
3GPP 5G Security Architecture (TS 33.501)2 controls

5G IMS services use SIP signaling with security mechanisms including IMS AKA, IPsec, and TLS to protect signaling and media between UE and IMS core.

33.501-11 · Security Aspects of IMS →

Questions people ask about ipsec

What is IPsec?
A suite of protocols that authenticates and encrypts IP packets to secure communications over IP networks, commonly used in VPN implementations.
Why is IPsec important for compliance?
IPsec is a key concept in Information Security. Understanding ipsec helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address IPsec?
IPsec appears in the requirement text of Australian Information Security Manual, NIST SP 800-187, O-RAN WG11 Security Specification, CCSDS 350.0-G-3 - Space Communications Security (Consultative Committee for Space Data Systems), ITU-T X.805 - Security Architecture for End-to-End Communications. Across these standards we have identified 18 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about IPsec?
Explore our compliance framework pages to see how ipsec applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how IPsec applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.