Enterasys ANG-7000 Guía de usuario descargar pdf (Pagina 27)

Release Notes Resolved Issues from the Last Release

Release 3.5 Enhanced Support for VPN Clients

Rel. 3.5 Release Notes Page 27 of 30

9. Configuration - the Phase II Security Action.

– Click the Green Encrypt icon under the Action heading.

– Select Edit to Configure.

– Select IKE, and then click Edit.

– Select Encryption + Data Integrity (ESP).

– Set the the Encryption Algorithm = 3DES.

– Set Date Integrity = SHA1.

– Set Allowed Peer Gateway = External ANG-1102 Gateway (configured in

Step 4).

– Click OK.

NOTE

The ANG-1102 supports the following values in Peer-to-Peer Mode.

- Encryption = 3DES & DES

- Data Integrity = SHA1 & MD5

- PFS = Group 1 or No PFS

10. After configuring the Checkpoint device, select Policy > Install on the

Checkpoint menu to enable the changes.

Resolved Issues from the Last Release

The following issues have been resolved since the 3.2 release of Aurorean system

software:

! IKE Site-to-Site tunnels will not authenticate with RADIUS. Bug # 3202.

! Unknown users have disappeared from the tunnel server. Bug # 3320.

Known Issues With This Release

The following issues were identified in previous releases of Aurorean system

software:

ANG-1100

! Web Config Fails to Bar More Than 1 ANG-1100 Tunnel to Same

ANG-3000/7000

Web Config does not enforce the functional limitation of one tunnel only from

an ANG-1100 to the same ANG-3000/7000. Bug # 3728.

! ANG-1100 Web Config Session Does Not Timeout

Web Config sessions on the ANG-1100 do not time out after running for 24

hours. The session should close after a default period of inactivity. Bug # 3271.

ANG/APS-3000/7000

! SecurID Authentication Not Verified for Native Clients Over EAP

1 2 ... 22 23 24 25 26 27 28 29 30

Sin comentarios

Enterasys ANG-7000 Guía de usuario Pagina 27