Canon MF419x User Manual page 590

[Use PFS]
Select the check box to enable Perfect Forward Secrecy (PFS) for IPSec session keys. Enabling PFS enhances
the security while increasing the load on the communication. Make sure that PFS is also enabled for the other
devices.
[Specify by Time]/[Specify by Size]
Set the conditions for terminating a session for IPSec SA. IPSec SA is used as a communication tunnel. Select
either or both of the check boxes as necessary. If both check boxes are selected, the IPSec SA session is
terminated when either of the conditions has been satisfied.
[Specify by Time]
[Specify by Size]
[Select Algorithm]
Select the [ESP], [ESP (AES-GCM)], or [AH (SHA1)] check box(es) depending on the IPSec header and the
algorithm used. AES-GCM is an algorithm for both authentication and encryption. If [ESP] is selected, also
select algorithms for authentication and encryption from the [ESP Authentication] and [ESP Encryption] drop-
down lists.
[ESP Authentication]
[ESP Encryption]
[Connection Mode]
The connection mode of IPSec is displayed. The machine supports transport mode, in which the payloads of
IP packets are encrypted. Tunnel mode, in which whole IP packets (headers and payloads) are encapsulated
is not available.
11
Click [OK].
● If you need to register an additional security policy, return to step 6.
12
Arrange the order of policies listed under [Registered IPSec Policies].
● Policies are applied from one at the highest position to the lowest. Click [Up] or [Down] to move a policy up or
down the order.
Security
Enter a time in minutes to specify how long a session lasts.
Enter a size in megabytes to specify how much data can be transported in a session.
To enable the ESP authentication, select [SHA1] for the hash algorithm. Select [Do Not
Use] if you want to disable the ESP authentication.
Select the encryption algorithm for ESP. You can select [NULL] if you do not want to
specify the algorithm, or select [Do Not Use] if you want to disable the ESP encryption.
581