Explanation/Reference:
Explanation:
Cisco GET VPN Features and Benefits
Feature
Description and Benefit
Key Services
Key Servers are responsible for ensuring that keys are granted to authenticated and authorized devices only. They maintain the freshness of the key material, pushing re-key messages as well as security policies on a regular basis. The chief characteristics include:
Key Servers can be located centrally, granting easy control over membership. Key Servers are not in the "line of fire" - encrypted application traffic flows directly between VPN
end points without a bottleneck or an additional point of failure.
Supports both local and global policies, applicable to all members in a group - such as "Permit any any", a policy to encrypt all traffic.
Supports IP Multicast to distribute and manage keys, for improved efficiency; Unicast is also supported where IP Multicast is not possible.
Scalability and Throughput
The full mesh nature of the solution allows devices to communicate directly with each other, without requiring transport through a central hub; this minimizes extra encrypts and decrypts at the hub router; it also helps minimize latency and jitter.
Efficient handling of IP Multicast traffic by using the core network for replication can boost effective throughput further Security Provides data security and transport authentication, helping to meet security compliance and internal regulation by encrypting all WAN traffic Reference: http://www.cisco.com/c/en/us/products/collateral/security/group-encrypted-transport- vpn/ product_data_sheet0900aecd80582067.html