Configure an IKEv1 IPsec proposal object

Use this task when you need to create or modify IKEv1 IPsec proposal objects in Secure Firewall Management Center. Proposal objects define the cryptographic parameters for VPN connections and are required for establishing secure tunnels between firewalls or security gateways.

Procedure

Step 1

Choose Objects > VPN > IKEv1 IPsec Proposal and then VPN > IPsec IKev1 Proposal from the table of contents.

Previously configured Proposals are listed including system defined defaults. Depending on your level of access, you may Edit (edit icon), View (View button), or Delete (delete icon) a Proposal.

Step 2

Choose Add IPsec IKEv1 Proposal to create a new Proposal.

Step 3

Enter a Name for this proposal.

The name of the policy object can be up to 128 characters.

Step 4

Enter a Description for this Proposal.

Provide a description of the policy object that is up to 1024 characters.

Step 5

Choose the ESP Encryption method. The Encapsulating Security Protocol (ESP) encryption algorithm for this Proposal.

For IKEv1, select one of the options. When deciding which encryption and Hash Algorithms to use for the IPsec proposal, your choice is limited to algorithms supported by the devices in the VPN. For a full explanation of the options, see Decide encryption algorithms for VPN policies.

Step 6

Select an option for ESP Hash.

For a full explanation of the options, see Decide which hash algorithms to use.

Step 7

Click Save

The new Proposal is added to the list.