Constructing an IPSec policy

rjbarlow

Hello techies,

I need a help for understanding how to construct IPSec policies.
If for example I want to allow FTP traffic for PC-1 only to and from PC-2 and all other comnputers must not to be able to do the same, I must (for PC1):

1) Construct an IPSec rule that blocks all FTP traffic to and from PC-1.
2) Construct a rule that permit FTP traffic to and from only the IP address of PC-2.

For this example do not consider if that policy is applied by a domain GPO or by the local GPO.
Is that right?