Managing Certificates - NETGEAR FVS318G-100NAS Reference Manual

ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
Table 5-3. Add VPN Policy Settings (continued)
Item
PFS Key Group
Select IKE Policy
5. Click Apply to save your settings. The VPN policy is added to the List of VPN Policies table.
To edit a VPN policy:
1. Select VPN from the main menu and Policies from the submenu. The Policies submenu tabs
appear with the IKE Policies screen in view (see
2. Click the VPN Policies tab. The VPN Policies screen displays (see
3. In the List of VPN Policies table, click the edit button to the right of the VPN policy that you
want to edit. The Edit VPN Policy screen displays. This screen shows the same field as the
Add VPN Policy screen (see
4. Modify the settings that you wish to change (see
5. Click Apply to save your changes. The modified VPN policy is displayed in the List of VPN
Policies table.

Managing Certificates

Digital Self Certificates are used to authenticate the identity of users and systems, and are issued
by various CAs (Certification Authorities). Digital Certificates are used by this VPN firewall
during the IKE (Internet Key Exchange) authentication phase as an alternative authentication
method.
The VPN firewall uses Digital Certificates (also known as X509 Certificates) during the Internet
Key Exchange (IKE) authentication phase to authenticate connecting VPN gateways or clients, or
to be authenticated by remote entities. The same Digital Certificates are extended for secure Web
access via SSL VPN connections over HTTPS.
5-30
Description (or Subfield and Description)
Select this checkbox to enable Perfect Forward Secrecy (PFS), and then select a
Diffie-Hellman (DH) group from the pull-down menu. The DH Group sets the
strength of the algorithm in bits. The higher the group, the more secure the
exchange. From the pull-down menu, select one of the following three strengths:
• Group 1 (768 bit).
• Group 2 (1024 bit). This is the default setting.
• Group 5 (1536 bit).
Select an existing IKE policy that defines the characteristics of the Phase-1
negotiation. Click the view selected button to display the selected IKE policy.
Figure 5-21 on page
v1.1, August 2010
Figure 5-18 on page 5-16).
Figure 5-20 on page
5-26).
Table 5-3).
Virtual Private Networking
5-24).