IPSec hardening howto?

Jul 23, 2013 1 Replies

First reply

Lutz Donnerhacke

Offer the strongest algorithms you have. Remove the weaker ones after debugging the session with the peer. Use certificates with your own CA and do apply CRLs.

Read the full reply

Greetings,



Does anyone know of an IOS IPSec hardening howto? No tomes, please. Just some advice on the best transform-set to use, etc.



TIA.


Offer the strongest algorithms you have. Remove the weaker ones after debugging the session with the peer. Use certificates with your own CA and do apply CRLs.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required