Why are some DH options missing from SecuExtender?
![Zyxel_James](https://us.v-cdn.net/6029482/uploads/defaultavatar/nN4PAQRO7TCNP.jpg)
Zyxel_James
Posts: 663
Zyxel Employee
![](https://us.v-cdn.net/6029482/uploads/userpics/FN0BI9T10CTX/n6O940IZ5DEW6.png)
![Second Anniversary](https://us.v-cdn.net/6029482/uploads/badges/P6A4SUUFXBDU.png)
![500 Comments](https://us.v-cdn.net/6029482/uploads/badges/9QC2L9NOJP6Y.png)
![100 Answers](https://us.v-cdn.net/6029482/uploads/badges/64OW7WFEOGRW.png)
![Zyxel Certified Sales Associate](https://us.v-cdn.net/6029482/uploads/badges/T8OIUCS56TCY.png)
in VPN
Question:
For old version of SecuExtender(IPSec_6.6.87.108), it supports the DH options from DES, 3DES, SHA-1, DH1, all the way to DH21.
However, why DES, 3DES, SHA-1, DH 1, DH 2, DH 5 are missing from the new version of SecuExtender VPN client (IPSec_SSL_VPN_7.7.40.019).
Answer:
We remove DES, 3DES, SHA-1, DH 1, DH 2, DH 5 from SecuExtender(IPSec_SSL_VPN_7.7.40.019) for security reasons, these algorithms are vulnerable.
Tagged:
0
Categories
- All Categories
- 414 Beta Program
- 2.2K Nebula
- 130 Nebula Ideas
- 88 Nebula Status and Incidents
- 5.4K Security
- 166 USG FLEX H Series
- 255 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 999 Wireless
- 36 Wireless Ideas
- 6.2K Consumer Product
- 233 Service & License
- 370 News and Release
- 77 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight