We use ISAKMP or IKE using 3DES key exchange and supports data integrity with
MD5 and SHA1.
This is used between 10 sites using Nokia's running FW-1 4.1.
Here is a sample of the new outsourcing manged setup using Xedia..
(Embedded image moved to file: pic13310.pcx)
They are telling me that the Xedia box's can't handle the fowarding of VPN
traffic between the Nokia's. Then I mentioned, why don't we establish an
encrypted session from one Nokia to the 2nd Xedia box on their side. They then
tell me the Xedia box has problems supporting Check Point VPN Tunneling. I
don't understand. Since both types of boxes are IPSec compliant, shouldn't
they be able to establish a VPN tunnel?
Thanks
AC
pic13310.pcx
