If I had to take a guess, I'd say this has something to do with it:
"Aggressive mode is faster than Main Mode but not as secure. However, aggressive mode uses half the number of messages, has less negotiation power, and does not provide identity protection."
Astaro is a security product after all, so it would make sense not to support unsecure methods.
__________________ ACE v8/SCA v9.3
...still have a v5 install disk in a box somewhere.
If I had to take a guess, I'd say this has something to do with it:
"Aggressive mode is faster than Main Mode but not as secure. However, aggressive mode uses half the number of messages, has less negotiation power, and does not provide identity protection."
Astaro is a security product after all, so it would make sense not to support unsecure methods.
__________________ ACE v8/SCA v9.3
...still have a v5 install disk in a box somewhere.
Aggressive mode is insecure... thus they dropped support for it. I think even Cisco has changed the defaults on newer builds of their security IOS, etc. to default to Main Mode.
CTO, Convergent Information Security Solutions, LLC
Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Probably a leftover from the OEM mfg. they didn't turn off... Astaro OEMs that client from another software vendor. Also, that client can be used to connect to other IPSEC VPN concentrators, not just an Astaro, so they may have left that option in purposefully (though I wouldn't, given Main Mode is safer and supported on most / all IPSEC VPN concentrators).
CTO, Convergent Information Security Solutions, LLC
Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
