Checking the
Enable Perfect Forward Secrecy of keys
checkbox means that an
attacker who acquires the SnapGear appliance’s long-term key (i.e. the
pre-shared secret
or
RSA Signature Key Private Section
) cannot:
•
Read previous messages which they may have archived, or
•
Read future messages without performing additional successful attacks
Perfect forward secrecy of keys provides the maximum security and is the recommended
setting.
IPSec interoperability
Please see the Support Knowledge Base
(http://www.SnapGear.com/knowledgebase.html) on the SnapGear Web Site
(http://www.SnapGear.com/) for detailed information on successfully establishing IPSec
tunnels between your SnapGear appliance and equipment from other vendors.
Virtual Private Networking
90
