Diffie Hellman Group support

Options
Cyril
Cyril Posts: 1 image  Freshman Member
edited April 2021 in Security
Hi Zyxel team,

I have a Zywall 110 with FW 4.32 and i try to configure IPSEC VPN with PFS Diffie Hellman Group of 15 but zyxel only support 1,2,5 and 14. (i must to use DH15)

Could you help me ?

All Replies

  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,482
    100 Answers 1000 Comments Friend Collector Ninth Anniversary
    image  Zyxel Employee
    Options
    Hi @Cyril
    The DH group 15 is not support yet.
    So I would like to add this topic to idea.
  • Plats
    Plats Posts: 12
    Zyxel Certified Sales Associate First Comment Sixth Anniversary
    image  Freshman Member
    Options
    I got a reply from Maurice
    that they are working on higher DH groups (however they have not specified what groups.

    "higher Diffie Hellman Groups will be implemented in an upcoming firmware update, this was confirmed by our development." - 10. sep.




  • Zyxel_Vic
    Zyxel_Vic Posts: 323
    25 Answers First Comment Friend Collector Ninth Anniversary
    image  Zyxel Employee
    Options
    Hi @Cyril  
    Higher DH groups is already in our roadmap in 2019.
  • Alfonso
    Alfonso Posts: 257
    5 Answers First Comment Friend Collector Second Anniversary
    image  Master Member
    Options
    Is there any estimated date to be delivered?
  • Zyxel_Vic
    Zyxel_Vic Posts: 323
    25 Answers First Comment Friend Collector Ninth Anniversary
    image  Zyxel Employee
    Options
    @Alfonso
    The schedule is not firmed yet. But we do have the plan to improve this part.
  • Alfonso
    Alfonso Posts: 257
    5 Answers First Comment Friend Collector Second Anniversary
    image  Master Member
    Options
    It sounds great @Zyxel_Vic. Thanks for your answer.
  • Zyxel_Joshua
    Zyxel_Joshua Posts: 63
    Zyxel Certified Network Administrator - Security 5 Answers First Comment Friend Collector
    image  Zyxel Employee
    Options
    ZLD 4.35 is released.
    Now the IPSec DH group support up to 18.

  • Rene_Sidler
    Rene_Sidler Posts: 4
    First Comment Seventh Anniversary
    image  Freshman Member
    Options
    Is support for DH21 or DH30 also on the roadmap? For example on ATP500

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）