Using IPSec to improve security

Thanks to Silverstr for the pointer (no trackback?) to "HOWTO: Secure Network Server with Windows IPSec". The theory is sound but the insistance on the Microsoft version scares me a bit because of the usual "embrace & extend" practice of our favorite vendor. In any case, it's a good practice.