Collaborate Disseminate
Multiple IPSec implementations I’ve run across support "AES-256" as an encryption algorithm. (pfSense has this, Checkpoint has this.)
What block cipher mode of operation is this?
Continue reading In IPSec, what block cipher mode of operation is "AES-256"?
I’m 100% confused after spending hours learning IPsec.
The options for each of my questions are: Tunnel Mode, Transport Mode, ESP, AH.
In which is a new IP Header added in addition to the current IP Header?
In which is the original IP He… Continue reading Solving Confusion regarding IPsec [closed]
I was reading about how IPsec works in Tunnel mode but I’m interested in one question.
I understand that IPsec encrypts the IP layer (not only) and adds a new one with the addresses of the 2 gateways connecting between 2 Hosts.
What if the… Continue reading Will IPsec work After the Following Change?
I’m deeper into different VPN technologies for university and wondering, how Wireguard is handling the IP-packets (header and payload) compared to IPsec’s tunnel and transport mode. May someone explain that to me?
Continue reading Comparing Wireguard to IPsec: Is Wireguard working like transport- or tunnel-mode?
I setup an IKE VPN server for road warriors. I actually have this working (YAY!) but took some shortcuts that are leaving me with a working yet not-right/secure setup. My setup is as follows:
My server (DNS name vpn.mydomain.com) contains … Continue reading Where should private key(s) reside in IPsec VPN tunnel
As the network service mesh sits on layer 3 of the OSI model (the network layer), can a IPSec VPN be used for communication across the public network?
https://networkservicemesh.io/
I am trying to "enforce" IPSec (StrongSwan) traffic on openSUSE.
On OpenBSD, with the IKE daemon iked and the packet filter pf, I employ a ruleset like the following, to ensure only encapsulated traffic passes the interface, prac… Continue reading firewalld: Block non-ESP packets on interface in GNU/Linux similar to OpenBSD
I am trying to "enforce" IPSec (StrongSwan) traffic on openSUSE.
On OpenBSD, with the IKE daemon iked and the packet filter pf, I employ a ruleset like the following, to ensure only encapsulated traffic passes the interface, prac… Continue reading firewalld: Block non-ESP packets on interface in GNU/Linux similar to OpenBSD
Disclaimer: My understanding of the types of VPNs and IPSec is limited.
What I am struggling to understand is the fact that the IP header is not encrypted in transport-mode IPSec.
My understanding of VPNs: There is a well-known VPN server,… Continue reading Trying to understand transport-mode IPSec and VPNs
We have a problem with the forticlient These last week many of our endpoints lose their licenses, we have to uninstall and reinstall the agent on the endpoint to reactivate the license.
I want to know what are the best solutions to correct… Continue reading FortiEMS: problem of unlicensed endpoint without uninstall and install forticlient [closed]