When is it OK to disable IPSec on windows 2003?

Giganews Newsgroups
Subject: When is it OK to disable IPSec on windows 2003?
Posted by:  Tim (T…@discussions.microsoft.com)
Date: Wed, 27 Aug 2008

I have a bunch of servers in my environment that have IPSec enabled but not
configured; some of theose servers are having serious performance issues, but
if I stop and disable the IPSec service, the performance issues go away.  I
have read some articles that say that IPSec should only be enabled if it's
going to be configured, but I'm not that familiar with IPSec.  I have two
questions:

1.  Is the statement that IPSec should only be enabled if it's going to be
configured and used a valid statement?

2.  What's the easiest way - besides opening the IPSec Snap-In on every
server and checking for policies - to know whether or not a server is
actually using IPSec policies?

Thanks in advance for your help!

Replies