Tech Tips: Different Encryption and Authentication methods supported on SonicOS for VPN

Nevyaditha

Hi Team,

This information is about the differnet encryption and authentication methods supported on SonicOS for VPN.

Different Encryption methods supported by SonicOS for IKE Phase 1 and IPSec Phase 2 Proposals are listed below:

• DES            • AES-128 

• 3DES          • AES-192 

                     • AES-256

Below Encryption Methods are only supported for IPSec Phase 2 Proposals

• AESGCM16-128      • AESGMAC-128     • None

• AESGCM16-192      • AESGMAC-192

• AESGCM16-256      • AESGMAC-256

Different Authentication methods supported by SonicOS for IKE Phase 1 and IPSec Phase 2 Proposals are listed below:

• MD5         • SHA1 

                    • SHA256

                    • SHA384

                    • SHA512

Authentication Methods AES-XCBC  and None are supported for IPSec Phase 2 Proposals only

I hope this information is usefull.

Regards,

Nevyaditha P

DominicWild

I came across this post recently whilst looking for information on connecting a SonicWall firewall directly to Azure through VPN.

My customer found that the uploads speeds through the VPN were slow, although Microsoft references speeds of up to 650Mbs when using GCMAES256. Is this an encryption method we support?

BWC

@DominicWild just checked with the available options on Phase 2 and I guess GCM16-256 is what you might looking for?

The screenshot is from Gen6, I guess Gen7 covers it as well.

--Michael@BWC