3
3
3-7
3-7
Installation > Checking the Operation After Making the Settings > Overview of the Security Policy Setting
Installation > Checking the Operation After Making the Settings > Overview of the Security Policy Setting
Setting by the PC
Communication condition of the PC:
In this procedure, the PC performs encryption communication with a device connected by
IPSec encryption.
It communicates with a device which has not been encrypted without encryption.
Checking the setting:
Encryption communication is regarded as successful when a ping is sent from the device
as usual and a response is returned after performing the setting accordingto the procedure
F-3-9
Overview of the Security Policy Setting
In this procedure, a new policy is created by selecting Control Panel > All Control Panel Items
> Administrative Tools > Windows Firewall with Advanced Security.
Flow of setting procedure:
Setting location
Setting item
Windows Firewall with Advanced Security on Local Computer
Windows Firewall Properties Control Panel > All Control Panel Items > Administrative Tools >
Windows Firewall with Advanced Security
IPsec Settings
Windows Firewall with Advanced Security on Local Computer
IPsec defaults
Customize
Key exchage(Main
Mode)
Advanced > Customize > Edit Security Method > Add
Integrity algorithm : SHA-1
Encryption algorithm : AES-CBC 128
Key exchange algorithm : Diffie-Hellman Group 2
Do not choose "Use Deffie-Hellman for enhanced security" in Key
exchange options
Data protection (Quick
Mode)
Select "Require encryption for all connection security rules that
use these settings."
Add Intergrity and Encryption Algorithms,
Protocol : ESP (recommended)
Algorithms : AES-CBC 128
Integrity algorithm : SHA-1
Authentication methodAuthentication method > Advanced > Customize > First
Authentication > Add First Authentication Method >Preshared key
(not recommended) (Ex: canon)
Connection Security Rules
Windows Firewall Properties Control Panel > All Control Panel Items > Administrative Tools >
Windows Firewall with Advanced Security
Connection Security Rules
Rule Type
Custom
Endpoints
Any IP address
Requirements
Require authentication for inbound and outbound connetions
Authentication Method Default
Protocol and Ports
Protocol type : Any
Profile
Select : Domain, Private, Public
Name
Any (Ex : test)
Connection Security Rules
Enable Rule
Select the created policy and assign it by right-clicking the mouse.
T-3-1
