Diffie Hellman Group support to 15

Zyxel_Stanley
Zyxel_Stanley Posts: 1,299
100 Answers 1000 Comments Friend Collector Sixth Anniversary
 Zyxel Employee
edited August 2022 in Security Ideas
This discussion was created from comments split from: Diffie Hellman Group 15
Description: Currently IPSec VPN Diffie Hellman Group only support for group 1, 2, 5, 14. But not group 15.
Click like if you think the feature is useful and beneficial.
0
0 votes

Completed · Last Updated

Supported in ZLD4.60 and above version.

Comments

  • Plats
    Plats Posts: 12
    First Comment Second Anniversary
     Freshman Member
    This artical states that even DH15 is far to low for security.

    At least go to DH19



  • Line2
    Line2 Posts: 40
    First Answer First Comment Friend Collector First Anniversary
     Freshman Member
    In my view the CISCO doc is absolutely right, DH14 is the absolut minimum at the moment, 19-21 would be recommended. German BSI gives the same advice.
  • Alfonso
    Alfonso Posts: 257
    5 Answers First Comment Friend Collector Second Anniversary
     Master Member
    The more configurations to be done, much better for the admin.
    I will always try to configure the most security for me and my customers and partners.
  • Line2
    Line2 Posts: 40
    First Answer First Comment Friend Collector First Anniversary
     Freshman Member
    at least DH19 in near future?
  • Zyxel_Joshua
    Zyxel_Joshua Posts: 48
    5 Answers First Comment Friend Collector Fifth Anniversary
     Zyxel Employee
    In ZLD 4.60, the DH Group 19, 20, 21 is support.

    For 128-bit security level, DH Group 19 is recommend. (instead of DH Group 15)
    For 192-bit security level, DH Group 20 is recommend. (instead of DH Group 18)
    For 256-bit security level, DH Group 21 is recommend.

Categories

Security Help Center

  • FAQ
  • New & Release
  • Monthly Express
  • Threat Intelligence
  • Video Tutorials
    • EnglishTiếng ViệtРусскийไทย中文（台灣）