Watchguard Firebox X1000, Reference Manual

Page: 235 / 264

Policy Manager
Reference Guide 223
Encryption
In the drop list, specify the type of encryption: DES or 3DES.
Diffie-Hellman Group
In the drop list, specify the Diffie-Hellman group. Diffie-Hellman
refers to a mathematical technique for securely negotiating secret
keys over a public medium. Diffie-Hellman groups are collections
of parameters used to achieve this. WatchGuard supports groups
1 & 2.
Enable Perfect Forward Secrecy
Enable this checkbox to enable Perfect Forward Secrecy. Perfect
Forward Secrecy (PFS) is a guarantee that only one key has been
generated from a single Diffie-Hellman exchange and that this
key is not used to derive additional keys.
Enable Aggressive Mode
Enable this checkbox to enable Aggressive Mode. Mode refers to
an exchange of messages in Phase 1. Main Mode is the default.
Negotiation Timeouts
Specify the negotiation timeouts in either kilobytes or hours.
OK
Closes this dialog box and saves any changes.
Remote User Setup dialog box
Mobile User VPN tab
Mobile User VPN
A list of License IDs for Mobile User VPN.
Logging
Click to access the Logging and Notification dialog box.
Regenerate
Click to regenerate the configuration files for Mobile User VPN
host machines.
Advanced
Click to access the Advanced Export File Preferences dialog box
where you set rules that apply to the mobile user connection.