Collaborate Disseminate
I have a situation where we (as a SaaS vendor) are migrating one of our clients away from their local premise to our public SaaS.
However as a security concern they want to route all their TCP traffic over an IPSEC Tunnel to our applicati… Continue reading TCP Traffic, SSL or extra Tunnel
I’m reading about security associations. I’ve understood that a SA is a virtual connection between a client and a sever, in which all the security parameters, such as encryption algorithm, IP origin and source HMAC algorithm…. Continue reading Is a security association (SA) implemented in ESP and AH protocols?
Here is the situation :
GW installed on CentOS7 with Strongswan 5.7.2 with these plugins loaded :
charon pkcs11 tpm aesni aes des rc2 sha2 sha1 md4 md5 mgf1 random
nonce x509 revocation constraints acert pubkey pkc… Continue reading Strongswan eap-identity no trusted certificate [migrated]
I got access to a VPN via IPsec and IKEv2. The provider gave me a username, a shared secret and a server certificate. Since the certificate was self-signed, the manual came with specific instructions on how to install it.
Th… Continue reading How hard is it to retrieve IKEv2 Server Certificate from the server?
not sure if it’s right place to ask for help, if not please forgive me. So I need to fill up VPN comparison table for my college homework, I’m not really familliar with VPN’s , just started to learn more about them in college… Continue reading Need help with VPN technologies comparison table [on hold]
I have done windows machine authentication with Linux running free swan server. With default configuration i could see ping encrypted with ESP. But i want to test it with AH also. Is there any way in which i can configure Win… Continue reading Is there any way in which i can configure Windows IPSEC policy to use just AH mode and not ESP
Lately, I’ve been paying $100 a month for Fios. I’m thinking of canceling this service because I rarely use my internet at home, since I’m at school most of the time and my college offers internet (both Wi-Fi and grounded). H… Continue reading Where would I go to use a reliably secure encrypted internet connection?
I can’t seem to find a sufficiently detailed resource that describes the IKE phase 1 PSK identity authentication process. They seem to focus on differences between aggressive and main mode while oversimplifying them.
I understand that ESP encrypts data and provides integrity for everything EXCEPT layer 3 (the IP address) and that AH provides integrity for everything but does not encrypt. What are the inherent risks of using ESP then? How … Continue reading How can the fact that ESP in IPSec does not provide integrity for the IP address be exploited?
Time to time IPSec tunnel status become down, with unusual SNMP Traffic. when I disable and enable port manually, it become normal.
I am using 200E fortigate firewall.
Have you any idea or previous experience with this iss… Continue reading IPsec down with unusual SNMP traffic [on hold]