ScreenOS Firewalls (NOT SRX)
ScreenOS Firewalls (NOT SRX)

Supported encryption of NSGT5?

‎07-02-2014 10:47 PM
Hi Guys,

We are about to setup a VPN with a client. Are these encryptions/phases supported in NSGT5? If so, can you tell me the corresponding phases for them as I'm not sure if we have them on our NSGT5.

Phase 1: AES-256, SHA1, Group5, life = 86,400 sec.
Phase 2: AES-256, SHA1, life = 28,800 sec.

Thanks in advanced!

Arnel
2 REPLIES 2
ScreenOS Firewalls (NOT SRX)
Solution
Accepted by topic author Noctis0791
‎08-26-2015 01:27 AM

Re: Supported encryption of NSGT5?

‎07-03-2014 09:17 AM

Those proposals are support, however, you would have to create a custom proposal set.

 

For example:

set ike p1-proposal pre-g5-aes256-sha preshare group5 esp aes256 sha-1 seconds 86400

set ike p2-proposal esp-aes256-sha1 esp aes256 sha-1 seconds 28800

 

ScreenOS Firewalls (NOT SRX)

Re: Supported encryption of NSGT5?

‎07-07-2014 06:54 AM

Thanks rseibert! Smiley Happy