This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN Cryptographic settings?

Hi
I'm looking for recommendations on balancing performance and security for the Cryptographic settings for SSL VPN?

I experimented with them in the past and it looked like when I doubled my key length it cut my bandwidth in half.

Is there any disadvantages to using UDP over TCP as its protocol?

Finally, Last year I heard there was a venerability with SSL traffic compression, has this been solved?

This thread was automatically locked due to age.

0 BarryG over 11 years ago

Hi,

UDP is preferred (better performance) as long as it's not blocked at whatever hotel, etc. you visit.

AES128 should give the best encryption performance and is considered about as secure as AES256 (some minor flaws have been found in AES256).

I don't recall an SSL compression issue; do you have any other info?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 NewImage over 11 years ago in reply to BarryG

I think it was the CRIME attack and BREACH, not sure if VPN traffic is susceptible

CRIME - Wikipedia, the free encyclopedia

What about the Authentication algorithm and key size?
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

Hi, iirc CRIME & BEAST are browser problems; I haven't heard anything about it applying to VPN clients.

The default AES profiles should be fine, but if you want to define a custom one, SHA would be more secure than MD5.

Barry
Cancel
Vote Up 0 Vote Down

Cancel