IPSec hardening howto?

Greetings,

Does anyone know of an IOS IPSec hardening howto? No tomes, please. Just some advice on the best transform-set to use, etc.

TIA.

Reply to
Don Kuenz
Loading thread data ...

Offer the strongest algorithms you have. Remove the weaker ones after debugging the session with the peer. Use certificates with your own CA and do apply CRLs.

Reply to
Lutz Donnerhacke

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.