CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Web Security > Connectra
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-08-04
Junior Member
 
Join Date: 2005-11-09
Posts: 21
Rep Power: 0
dragec has an average reputation (10+)
Default AES-128

does connectra supports AES-128 encryption .... and if does .... how to configure it and force it?
Reply With Quote
  #2 (permalink)  
Old 2007-08-04
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 909
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: AES-128

Support AES-128 for what? SecureClient Mobile?

Ray
Reply With Quote
  #3 (permalink)  
Old 2007-08-04
Junior Member
 
Join Date: 2005-11-09
Posts: 21
Rep Power: 0
dragec has an average reputation (10+)
Default Re: AES-128

for ssl encrypted portal site
Reply With Quote
  #4 (permalink)  
Old 2007-08-05
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 909
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: AES-128

SSL does not support AES as far as I know. TLS, however, does. If there is a way to enable TLS exclusively, that would be how you do it. I believe TLS does have backward compatibility for SSL browsers, so you would have to figure out how to turn that off.

Ray
Reply With Quote
  #5 (permalink)  
Old 2007-08-05
Junior Member
 
Join Date: 2005-11-09
Posts: 21
Rep Power: 0
dragec has an average reputation (10+)
Default Re: AES-128

thanks for the answer. And what about SNX?
Reply With Quote
  #6 (permalink)  
Old 2007-08-05
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 909
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: AES-128

I would think that if you could switch the portal to TLS, then SNX would be the same as the portal. The default is to run them both on the same IP address, so I don't know how it could be any different.

Ray
Reply With Quote
  #7 (permalink)  
Old 2007-08-05
Junior Member
 
Join Date: 2005-11-09
Posts: 21
Rep Power: 0
dragec has an average reputation (10+)
Default Re: AES-128

well ... ther is no AES support in config for SNX ... only 3DES or RC4 ... and in documentation it is somewhere stated that Connectra does support AES ... so I am just trying to figure out how. Anyway thanks for you time.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:57.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0