Cisco ASA 5505 Configuration Manual page 1298

Configuring IPsec
Firewall Mode
Routed
•
IPsec Transform Sets
Use this pane to view and add or edit transform sets. A transform is a set of operations done on a data
flow to provide data authentication, data confidentiality, and data compression. For example, one
transform is the ESP protocol with 3DES encryption and the HMAC-MD5 authentication algorithm
(ESP-3DES-MD5).
Fields
•
•
•
•
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Add/Edit Transform Set
Use this pane to add or modify a transform set. A transform is a set of operations done on a data flow to
provide data authentication, data confidentiality, and data compression. For example, one transform is
the ESP protocol with 3DES encryption and the HMAC-MD5 authentication algorithm
(ESP-3DES-MD5).
Cisco ASA 5500 Series Configuration Guide using ASDM
63-18
Security Context
Transparent Single
— •
Transform Sets—Shows the configured transform sets.
Name—Shows the name of the transform sets.
–
Mode—Shows the mode, Tunnel, of the transform set. This parameter specifies the mode for
–
applying ESP encryption and authentication; in other words, what part of the original IP packet
has ESP applied. Tunnel mode applies ESP encryption and authentication to the entire original
IP packet (IP header and data), thus hiding the ultimate source and destination addresses.
ESP Encryption—Shows the Encapsulating Security Protocol (ESP) encryption algorithms for
–
the transform sets. ESP provides data privacy services, optional data authentication, and
anti-replay services. ESP encapsulates the data being protected.
ESP Authentication—Shows the ESP authentication algorithms for the transform sets.
–
Add—Opens the Add Transform Set dialog box, in which you can add a new transform set.
Edit—Opens the Edit Transform Set dialog box, in which you can modify an existing transform set.
Delete—Removes the selected transform set. There is no confirmation or undo.
Security Context
Transparent Single
—
•
Chapter 63
Multiple
Context System
— —
Multiple
Context System
— —
Configuring IKE, Load Balancing, and NAC
OL-20339-01