Watchguard Firebox V10, User Manual

Page: 350 / 477

CHAPTER 11: Using Virtual Private Networks (VPN)
318 Vcontroller
4
Review the default encryption options listed in the
Unselected Proposals list, select any options that your
new IPSec action requires, and then click
Add
.
The proposal is displayed in the Selected Proposals field.
If none of the unselected proposals meets the requirements
of this automatic key IPSec action, you can create your own
proposals.
1 Click New .
The New IPSec Proposal dialog box appears.
2
In the Name and Description fields, type a name and
brief description for the IPSec proposal. The
Description field is optional.
3
From the
Anti-Replay
window, select an anti-replay
option.
These options can protect your system from replay attacks.
You can now add an ESP transform, AH transform, or both.
A
transform defines the encryption and authentication algo-
rithms used by the Firebox Vclass appliance. A transform
also sets the lifetime of any given key. ESP transforms are