yeah, IPSec is the way to go when building secure environments. I've been on some seminars on this actually, and it ain't that hard to implement. Just remember that it has about 20-30% of overhead on the network traffic. You can also accomplish alot with 2003 SP1 & WinXP SP2 clients using Firewall GPO's and DHCP client scope planning.

Edited by masken (2005-04-14 11:47 PM)
_________________________
The tart is out there