Tech Tips: Different Encryption and Authentication methods supported on SonicOS for VPN
Nevyaditha
Moderator
Hi Team,
This information is about the differnet encryption and authentication methods supported on SonicOS for VPN.
Different Encryption methods supported by SonicOS for IKE Phase 1 and IPSec Phase 2 Proposals are listed below:
• DES • AES-128
• 3DES • AES-192
• AES-256
Below Encryption Methods are only supported for IPSec Phase 2 Proposals
• AESGCM16-128 • AESGMAC-128 • None
• AESGCM16-192 • AESGMAC-192
• AESGCM16-256 • AESGMAC-256
Different Authentication methods supported by SonicOS for IKE Phase 1 and IPSec Phase 2 Proposals are listed below:
• MD5 • SHA1
• SHA256
• SHA384
• SHA512
Authentication Methods AES-XCBC and None are supported for IPSec Phase 2 Proposals only
I hope this information is usefull.
Regards,
Nevyaditha P
Nevyaditha P
Technical Support Advisor, Premier Services
Comments
I came across this post recently whilst looking for information on connecting a SonicWall firewall directly to Azure through VPN.
My customer found that the uploads speeds through the VPN were slow, although Microsoft references speeds of up to 650Mbs when using GCMAES256. Is this an encryption method we support?
@DominicWild just checked with the available options on Phase 2 and I guess GCM16-256 is what you might looking for?
The screenshot is from Gen6, I guess Gen7 covers it as well.
--Michael@BWC