Does USG FLEX H support AES256-CBC encryption for IPsec VPN Phase 1 and Phase 2?

Options
Zyxel_Emily
Zyxel_Emily image  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

Question:
Does USG FLEX H support AES256-CBC encryption for IPsec VPN Phase 1 and Phase 2? How do I configure AES256-CBC on USG FLEX H for an IPsec VPN connection?

Answer:
Yes, USG FLEX H series supports AES-256-CBC encryption.
For IPsec VPN, the Standard AES-CBC algorithms (including AES-128-CBC, AES-192-CBC, and AES-256-CBC) are fully supported.

image.png


To enable AES256-CBC encryption, select "AES256" in your VPN configuration settings.

image.png
Tagged: