iPECS SBG-1000 User Manual

iPECS SBG-1000 User Manual (DATA Features)
• Gateway authentication: X.509, RSA signatures and pre-shared secret key
• IP protocols: ESP, AH
• Encryption: AES, 3DES, DES, NULL, HW encryption integration (platform dependent)
• Authentication: MD5, SHA-1
• IP Payload compression
• Interoperability: VPNC Certified IPSec, Windows 2000, Windows NT, FreeS/WAN, FreeBSD,
Checkpoint Firewall-1, Safenet SoftRemote, NetScreen, SSH Sentinel
5.4.1.2 IPSec Settings
Access this feature either from the ‘VPN’ menu item under the ‘Services’ tab, or by clicking its icon
in the ‘Shortcut’ screen. The ‘Internet Protocol Security (IPSec)’ screen appears.
Figure 5.72 Internet Protocol Security (IPSec)
This screen enables you to configure the following settings:
Block Unauthorized IP Select the ‘Enabled’ check box to block unauthorized IP packets to
iPECS SBG-1000. Specify the following parameters:
• Maximum Number of Authentication Failures The maximum number of packets to
authenticate before blocking the origin’s IP address.
• Block Period (in seconds) The timeframe during which iPECS SBG-1000 will drop packets
from an unauthorized IP address.
Enable Anti-Replay Protection Select this option to enable dropping of packets that are
recognized (by their sequence number) as already been received.
Connections This section displays the list of IPSec connections. To learn how to create an IPSec
connection, refer to Section 6.4.12.
5.4.1.2.1 Public Key Management
The ‘Settings’ button in the ‘Internet Protocol Security (IPSec)’ screen enables you to manage
iPECS SBG-1000’s public keys.
1. Click the ‘Settings’ button (see Figure 5.72) to view iPECS SBG-1000’s public key. If
necessary, you can copy the public key from the screen that appears.
86