VPNet VSU 2000, User Manual

Page: 28 / 37

3-8 Preparing the VSU-2000 for Configuration
VSU-2000 User Guide
FIPS Mode
FIPS (Federal Information Processing Standards) Mode forces the VSU to
operate in a FIPS 140-1 Level 2 compliant mode. It is recommended that this
mode only be used if your organization’s policy requires FIPS 140-1 Level 2
certification for cryptographic devices.
Note that in the FIPS mode (as dictated by the FIPS 140-1 requirements
specification), the following are NOT supported:
• SKIP VPNs
• VPNremote 2.5x Clients
• Any encryption algorithm other than DES or 3DES
• Any authentication algorithm other than SHA-1
General Firmware Upgrade Information
Configuration Items Left to the VPNmanager
The following items are likely to be configured by most administrators, but are
left to VPNmanager or other VSU console menu items to keep the Quick Setup
menu minimal:
• LDAP servers used to authenticate VPNmanager console users.
• Disable a VSU’s SuperUser account.
Flushing the configuration on VPNware 3.1
In the event you flush the configuration (via VSU console menu item
Configuration->Flush Configuration) on a VSU running VPNware 3.1 the
following occurs:
• The superuser name will be “root”.
• There will be no superuser password.
• If a VSU console password is configured, it will be preserved.
• The secondary IP address will be empty.
• The blocking mode will be set to forward all non-VPN traffic.