Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have installed COMODO Firewall and I have some knowledge about internet security and i set up my firewall rules so my computer is protected enough (that really doesn't matter in current context). The question is: Do I really need Windows Internet Protocol Security (IPsec)?

share|improve this question
What for? What is your objective behind using IPSec? – lisa17 Aug 17 '11 at 9:39
up vote 2 down vote accepted

I would ask, how do you think you are using IPsec? Between what hosts would you be using it? The chances are you have zero reason for it. IP sec is used on internal networks to make sure that people can't use programs like Wireshark to capture and decode packets. It requires both ends of the connection to agree to use it.

As you browse the Internet, and use other protocols out there for different applications, those foreign hosts are not going to be setting up IPsec tunnels with you. A VPN may use IPsec, but I think that is mostly site-to-site VPN's, not the type you might commonly use, and they have their own methods of encryption.

So if you are on a home network, and you REALLY think that someone can physically tap into your network, and REALLY has the desire to run a protocol sniffer, then by all means, set it up. Of course, the chances of that are 1 in a million, so buy a lottery ticket too.

share|improve this answer
"IP sec is used on internal networks to make sure that people can use programs like Wireshark to capture and decode packets." Really? – lisa17 Aug 17 '11 at 9:38
@brahims Thank you. Of course, just the opposite: I meant "can't". I edited it. – KCotreau Aug 17 '11 at 12:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.