PQ Show 104: Design & Build 12: Certificate-Based DMVPN Design

The latest entry in our Design & Build series digs deeper into DMVPN. Today’s focus is on using certificates for endpoint authentication. Our guest for this conversation is Nick Moody, a network and security engineer with experience in the enterprise, the public and financial sectors, and service providers. We discuss the use of pre-shared keys to authenticate endpoints, which is one deployment method, and examine the security drawbacks of this option. We explore the advantages of certificate authentication (security and scalability), address the challenges of working with a public-key infrastructure (PKI), and get into details on certificate management. Nick Moody blogs at NetAssured. For more on DMVPN and to find the other podcasts in this series, check out our Design & Build page.