[Ach] DH Groups in VPN section

christian mock cm at coretec.at
Mon Dec 23 23:24:41 CET 2013

On Tue, Dec 17, 2013 at 07:43:43PM +0100, Aaron Zauner wrote:

> > So I suggest we either put in one group that fits the config A/B
> > (which group would that be? do we go into detail WRT DH parameter
> > sizes in the configs?), or all of them.
> Does CheckPoint even support those Groups? The ASA does not, and I’m not aware of softwware implementations that do. [0] [1]

That's why those are listed in the general IPSEC section -- they're
defined, maybe somebody does implement them.

Group 14, I think, is supported everywhere I looked.


Christian Mock                          Wiedner Hauptstr. 15
Senior Security Engineer                1040 Wien
CoreTEC IT Security Solutions GmbH      +43-1-5037273
FN 214709 z

CoreTEC: Web Application Audit - Damit so etwas nicht passiert!



More information about the Ach mailing list