1
Download Configuring NAT
Transcript
The Check Point Solution for VPN Topology and Encryption Issues Issues involving topology and encryption can arise as a result of an organization’s policy on security, for example the country in which a branch of the organization resides may have a national policy regarding encryption strength. For example, policy says the Washington Gateways should communicate using 3DES for encryption. Policy also states the London Gateways must communicate uses DES as the encryption algorithm. In addition, the Washington and London Gateways (as shown in Figure 19-13) need to communicate with each other using the weaker DES. Consider the solution in Figure 19-13: Figure 19-13Different means of encryption in separate Mesh communities In this solution, Gateways in the Washington mesh are also defined as satellites in the London star. In the London star, the central Gateways are meshed. Gateways in Washington build VPN tunnels with the London Gateways using DES. Internally, the Washington Gateways build VPN tunnels using 3DES. Chapter 19 Introduction to Site to Site VPN 423
