NETGEAR STM150EW-100NAS, UTM5EW-100NAS manual 307, Setting Description Auto Policy Parameters

ProSecure Unified Threat Management (UTM) Appliance

Table 74. Add New VPN Policy screen settings (continued)

Setting	Description
Auto Policy Parameters
Note: These fields apply only when you select Auto Policy as the policy type.
SA Lifetime	The lifetime of the security association (SA) is the period or the amount of
	transmitted data after which the SA becomes invalid and needs to be
	renegotiated. From the drop-down list, select how the SA lifetime is specified:
	• Seconds. In the SA Lifetime field, enter a period in seconds. The minimum
	value is 300 seconds. The default value is 3600 seconds.
	• KBytes. In the SA Lifetime field, enter a number of kilobytes. The minimum
	value is 1920000 KB.
Encryption Algorithm	From the drop-down list, select one of the following five algorithms to negotiate
	the security association (SA):
	• DES. Data Encryption Standard (DES).
	• 3DES. Triple DES. This is the default algorithm.
	• AES-128. Advanced Encryption Standard (AES) with a 128-bit key size.
	• AES-192. AES with a 192-bit key size.
	• AES-256. AES with a 256-bit key size.
Integrity Algorithm	From the drop-down list, select one of the following algorithms to be used in the
	VPN header for the authentication process:
	• SHA-1. Hash algorithm that produces a 160-bit digest. This is the default
	setting.
	• MD5. Hash algorithm that produces a 128-bit digest.
	• AES-256. Hash algorithm that produces a 256-bit digest.
	• AES-512. Hash algorithm that produces a 512-bit digest.
PFS Key Group	Select this check box to enable Perfect Forward Secrecy (PFS), and then select
	a Diffie-Hellman (DH) group from the drop-down list. The DH Group sets the
	strength of the algorithm in bits. The higher the group, the more secure the
	exchange. From the drop-down list, select one of the following strengths:
	• Group 1 (768 bit).
	• Group 2 (1024 bit). This is the default setting.
	• Group 5 (1536 bit).
	• Group 14 (2048 bit).
	• Group 15 (3072 bit).
	• Group 16 (4096 bit).
Select IKE Policy	Select an existing IKE policy that defines the characteristics of the Phase-1
	negotiation. To display the selected IKE policy, click the View Selected button.

4.Click Apply to save your settings. The VPN policy is added to the List of VPN Policies table.

Virtual Private Networking Using IPSec, PPTP, or L2TP Connections

307