Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 19 replies
  • Subscribers 1 subscriber
  • Views 12068 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

When will the the UTM update to current StrongSWAN build?

coewar
Upgrade to modern version of StrongSWAN which uses charon instead of pluto

The ipsec binary in use today is from 2010 still. Wouldn't it be a good idea to be on top of the versions? Particularly since Sohpos is one of the big guys listed as sponsoring the StrongSWAN project, which is what gives IPSec VPN capabilities to the Astaro?


This thread was automatically locked due to age.
Parents
  • 0
    Sophos might be FORCED to act on this soon. Now that SHA-1 is being frowned upon, there is no way (that I can see) to negotiate SHA-256 or better with a Cisco ASA, unless you support IKEv2. Lack of IKEv2 support for site-to-site tunnels was a deal breaker for me on this device, although I do use it with success in home lab environment.
Reply
  • 0
    Sophos might be FORCED to act on this soon. Now that SHA-1 is being frowned upon, there is no way (that I can see) to negotiate SHA-256 or better with a Cisco ASA, unless you support IKEv2. Lack of IKEv2 support for site-to-site tunnels was a deal breaker for me on this device, although I do use it with success in home lab environment.
Children
No Data
Unfiltered HTML