Figure 13-7 Edit Vpn Rule: Advanced; Table 13-8 Edit Vpn Rule: Advanced - ZyXEL Communications ZyWALL 5 User Manual

The following table describes the labels in this screen.
LABEL
Phase 1
Negotiation Mode Select Main or Aggressive from the drop-down list box. Multiple SAs connecting through
a secure gateway must have the same negotiation mode.
Encryption Select DES, 3DES or AES from the drop-down list box.
Algorithm
When you use one of these encryption algorithms for data communications, both the
sending device and the receiving device must use the same secret key, which can be
used to encrypt and decrypt the message or to generate and verify a message
authentication code. The DES encryption algorithm uses a 56-bit key. Triple DES (3DES)
is a variation on DES that uses a 168-bit key. As a result, 3DES is more secure than
DES. It also requires more processing power, resulting in increased latency and
decreased throughput. This implementation of AES uses a 128-bit key. AES is faster
than 3DES.
Authentication Select SHA1 or MD5 from the drop-down list box. MD5 (Message Digest 5) and SHA1
Algorithm (Secure Hash Algorithm) are hash algorithms used to authenticate packet data. The
SHA1 algorithm is generally considered stronger than MD5, but is slower. Select MD5 for
minimal security and SHA-1 for maximum security.
VPN Screens

Figure 13-7 Edit VPN Rule: Advanced

Table 13-8 Edit VPN Rule: Advanced

ZyWALL 5 Internet Security Appliance
DESCRIPTION
13-17