[FW1] ISAKMP Key exhange encryption strength

[Nick.Mandis@FW1-NOSPAMnatwest.com]

Hi, 

Any information or advice on the following would be of great help:-

At present, we have a VPN setup bewteen  us and a third party company. Both
Firewalls are Firewall-1. The difference is, we are Version 4.0 (Build 4031
VPN + DES) and their's is  Version 4.1 VPN + DES (I'm not too sure what
build its got.).   

What I want to do is change how the ISAKMP/OAKELY Phase one key exchange is
encrypted, I  want to amend this from DES to 3DES. The data that the rule
encrypts I don't want to change - this is set to DES at the moment. 

I believe for this to happen I will need a License that supports VPNSTRONG
on both Firewalls. This is what I was told my my Firewall support area. 

I'm still not so sure because the version is  VPN +DES only. I was a bit
concerned that you need to also install 3Des algorithms. 

Has anyone performed a simlalar operation. 

Thanks.




Nick Mandis
Security Services

Level O/1, Goodmans Fields, 74 Alie Street, London E1 8HL

Phone: 78003: 3653 ()
work email: Nick.Mandis@natwest.com:     

--------------------------------------------------------------------------------------------
"National Westminster Bank plc is registered in England No 929027. Registered Office: 135 Bishopsgate, London EC2M 3UR.
National Westminster Bank plc is regulated by IMRO, SFA and Personal Investment Authority.  A member of the NatWest and Gartmore Marketing Group advising on the life assurance, pensions and unit trust products only of that Marketing Group.

This e-mail message is confidential and for use by the addressee only.  If the message is received by anyone other than the addressee, please return the message to the sender by replying to it and then delete the message from your computer.
Internet e-mails are not necessarily secure.  National Westminster Bank plc does not accept responsibility for changes made to this message after it was sent."
--------------------------------------------------------------------------------------------


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================