Stormshield SN series Configuration Manual page 177

IPSec (Phase 2) encryption profile
Phase 2 of the IKE protocol securely negotiates (through an ISAKMP SA communication channel
negotiated during the first phase) the parameters of future IPSec SAs (one incoming our
outgoing).
The drop-down list allows choosing the protection model associated with your VPN policy, from 3
pre-configured profiles: StrongEncryption , GoodEncryption , and Mobile. Others may also be
created.
Table of profiles
This table offers a series of predefined Phase 1 and Phase 2 encryption profiles. For each
selected profile, you will see its characteristics to the right of the screen (" General ",
"Authentication proposals" and "Encryption proposals" fields).
Add By clicking on this button, you will be able to add a Phase 1 profile (IKE) or Phase 2 profile
(IPSec), which will be displayed in the "Type" column.
You can give it any "Name" you wish.
It is also possible to copy a profile and its characteristics: to do so, select the desired profile
and click on the option Copy selection, and give it a name.
Delete Select the encryption profile to be deleted from the list and click on Delete.
General
Comments
Page 177/448
Description given to your encryption profile.
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
IPSEC VPN