This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPsec Connection

Hi All,

Is Sophos Support HMAC????



This thread was automatically locked due to age.
Parents
  • Hello Tharindu,

    Thank you for contacting the Sophos Community!

    Yes the XG Supports IPsec connection. Sha is basically HMAC.

    Here are some logs that shows:

    received proposals:

    2020-09-20 00:11:26 29[CFG] <Azure_to_XG-1|3> selected proposal: ESP:AES_CBC_256/HMAC_SHA2_512_256/NO_EXT_SEQ

    Regards,

  • Hi Emmanuel,

    Thank you for your support,

    below is the phase 2 details that the customer send to me

    IPSEC Parameters (Phase 2)
    IPSEC Encryption: HMAC
    Authentication Method: AES
    Hash: SHA1, MDF5, SHA256
    Security Association Lifetime (seconds): 3600
    Perfect Forward Secrecy (PFS) (Yes or No)? Yes

    you can see the IPSEC Encryption is HMAC, so what SHA Profile is needed here?

    pardon for my English.

Reply
  • Hi Emmanuel,

    Thank you for your support,

    below is the phase 2 details that the customer send to me

    IPSEC Parameters (Phase 2)
    IPSEC Encryption: HMAC
    Authentication Method: AES
    Hash: SHA1, MDF5, SHA256
    Security Association Lifetime (seconds): 3600
    Perfect Forward Secrecy (PFS) (Yes or No)? Yes

    you can see the IPSEC Encryption is HMAC, so what SHA Profile is needed here?

    pardon for my English.

Children