Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 617 / 861

616 Field descriptions
Policy field descriptions
IPsec static key policy Properties—Data Privacy Preference tab
The data privacy preference is one of the algorithms that you specify when you create an IPsec/static
policy for VPN tunnels. It specifies the encapsulation security payload for packets sent through the
tunnel.
Associated tasks
The task that you can perform with this tab is:
■
“Creating a VPN policy for IPsec with static key” on page 382
Table D-50 IPsec static key policy Properties—Data Privacy Preference tab
Field Description
Available Select a data privacy preference from this list and click the right-arrow >> button to move it
to the Selected list.
The options are:
■
No Encryption
This is the default.
■
DES
Uses the Data Encryption Standard using a 56-bit key to encrypt and decrypt messages
■
3DES.
Uses triple Data Encryption Standard using three 56-bit keys to encrypt and decrypt
messages.
■
AES-16
Uses Advanced Encryption Standard with a 16-byte key to encrypt and decrypt
messages.
■
AES-24
Uses Advanced Encryption Standard with a 24-byte key to encrypt and decrypt
messages.
■
AES-32
Uses Advanced Encryption standard with a 32-byte key to encrypt and decrypt
messages.
In a static policy, you can select only one data privacy algorithm.
Selected Lists data privacy methods that are currently in use in the policy.
The default is No Encryption.
Up Moves the selected item in the Selected list up in the list.
If more than one algorithm is assigned, the first one is tried, and if unsuccessful, the next
algorithm is tried.
Down Moves the selected item in the Selected list down in the list.