Collaborate Disseminate
I have a couple of customers who still use the old discontinued/obsolete IPSEC based Cisco VPN client.
Obviously it is not a good idea to use software that is no longer supported, but that aside: what are the known risks wit… Continue reading Known risks with the old IPSEC Cisco VPN client?
I have problems understanding why you would negotiate crypto-algorithms in the Create_Child_SA request in a IKEv2.
During IKE_SA_INIT you negotiate cryptographic algorithms which I assume (correct me if I am wrong) are very … Continue reading What’s the point of the second SA exchange in the Create_Child_SA exchange in IPsec
I am in the process of setting up some site-to-site VPN connections between our sites.
Our new VPN servers at each site have numerous encryption/authentication methods and I want to know which are the best from a security pe… Continue reading What encryption/authentication methods to use on our VPN server?
I am interested in any attack which happens trough packet header information like IP header, TCP header, DLL header etc.
Also, what kind of traffic analysis is saved by Tunneling with encryption protocols?
This guy argues it is not: https://www.youtube.com/watch?v=DuowFgNKAIg
I really confused about this. According to him, the only purpose of main mode is to make the peers anonymous, but in order to use main mode you need to manually config… Continue reading Is IKE aggressive mode really less secure than main mode?
This is what a casual IKEv2 handshake looks like :
Initiator Responder
| |
1|——————-… Continue reading Key exchange during IKE_AUTH phase of IKEv2
Some articles and Websites (Wikipedia and Cisco for instance) claim that unlike IKEv1, IKEv2 provides a support for Dead Peer Detection. However, unlike NAT traversal or DoS attacks for example, the official RFC 4306 did not … Continue reading IKEv2 and Dead Peer Detection
I have read that it is recommended to encapsulate IPsec packets into UDP (port 4500) packets in order to circumvent NAT. Could anyone please provide a detailed explanation of the reasons behind this solution?
In “Network Security, Private Communication in a Public World” 2nd edition, page 438, there is this question “Why is the integrity check processing more convenient with ESP than with AH?”
Could anyone please provide me with … Continue reading AH ICV vs ESP ICV performance benchmark
IPsec offers two protocols : AH and ESP. Each could operate in one two following modes of operation : Tunnel mode and Transport mode. Besides, IPsec could be implemented in three different ways : Host-to-Host, Gateway-to-Gate… Continue reading When to use AH or ESP/Tunnel mode or Transport mode