CyberGuard SG300 User Manual page 61

If you wish, you may enter a descriptive Connection Name.
Enter a free IP Address for Dial-In Clients, this must be a free IP address from the
network (typically the LAN) that the remote user is assigned while connected to the
CyberGuard SG appliance.
If you have configured several network connections, select the one that you want to
connect remote users to from the IP Address for Dial-In Server pull down menu. This is
typically a LAN interface or alias.
Select the weakest Authentication Scheme to accept, access is denied to remote users
attempting to connect using an authentication scheme weaker than this. They are
described below, from strongest to weakest.
Encrypted Authentication (MS-CHAP v2): The strongest type of authentication to
use. This is the recommended option.
Encrypted Authentication (MS-CHAP): This is not a recommended encryption type
and should only be used for older dialin clients that do not support MS-CHAP v2.
Weakly Encrypted Authentication (CHAP): This is the weakest type of encrypted
password authentication to use. It is not recommended that clients connect using this
as it provides very little password protection. Also note that clients connecting using
CHAP are unable to encrypt traffic.
Network Setup
57