Enterprise security deployments are increasingly implemented with multiple layers of defense. z/OS Communications Server IPSec and IP packet filtering provide an essential layer of server endpoint "self-protection" for mainframe systems and data. IPSec protects data in the network by providing encryption and authentication services transparently to applications running on z/OS. IP packet filtering controls which packets are allowed in and out of z/OS. This session covers information that will enable you to deploy a z/OS-based IPSec and IP packet filtering solution. General IPSec and packet filtering concepts and z/OS usage scenarios are discussed. Also described are the configuration steps required to implement IPSec and IP packet filtering using the Configuration Assistant for z/OS Communications Server.