- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
Which VPN-related RFC's and drafts are supported in SonicWall firmware?
03/26/2020 
5 People found this article helpful
118,968 Views
Description
Which VPN-related RFC's and drafts are supported in SonicWall firmware?
Resolution
In the older SonicWall firmware 6.x (GEN2/GEN3), SonicOS 2.x/3.x Standard, and SonicOS 2.x/3.x Enhanced, the following are supported:
Internet Drafts
‘Negotiation of Nat-Traversal in the IKE’, drafts 00 (Standard only)
| RFC | TITLE |
|---|---|
| RFC 1825 | Security Architecture for the Internet Protocol (obsoleted by RFC 2401) |
| RFC 1826 | IP Authentication Header (obsoleted by RFC 2402) |
| RFC 1827 | IP Encapsulating Security Payload (ESP) (obsoleted by RFC 2406) |
| RFC 1828 | IP Authentication using Keyed MD5 |
| RFC 1829 | The ESP DES-CBC Transform |
| RFC 2085 | HMAC-MD5 IP Authentication with Replay Prevention |
| RFC 2104 | HMAC: Keyed-Hashing for Message Authentication |
| RFC 2401 | Security Architecture for the Internet Protocol |
| RFC 2402 | IP Authentication Header |
| RFC 2403 | The Use of HMAC-MD5-96 within ESP and AH |
| RFC 2404 | The Use of HMAC-SHA-1-96 within ESP and AH |
| RFC 2405 | The ESP DES-CBC Cipher Algorithm With Explicit IV |
| RFC 2406 | IP Encapsulating Security Payload (ESP) |
| RFC 2407 | The Internet IP Security Domain of Interpretation for ISAKMP |
| RFC 2408 | Internet Security Association and Key Management Protocol (ISAKMP) |
| RFC 2409 | The Internet Key Exchange (IKE) |
| RFC 2410 | The NULL Encryption Algorithm and Its Use With IPsec |
| RFC 2411 | IP Security Document Roadmap |
| RFC 2451 | The ESP CBC-Mode Cipher Algorithms |
| RFC 3526 | More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE) |
| RFC 3602 | The AES-CBC Cipher Algorithm and Its Use with IPsec |
| RFC 3706 | A Traffic-Based Method of Detecting Dead Internet Key Exchange (IKE) Peers (Enhanced only) |
| RFC 3947 | Negotiation of NAT-Traversal in the IKE (Enhanced only) |
| RFC 4306 | Internet Key Exchange (IKEv2) Protocol (Enhanced only) |
Related Articles
- No 2FA Prompt for accessing Management Console using GVC.
- How to create port shield interface on SonicWall?
- How can I enable multicast support?
Categories
- Firewalls > TZ Series
- Firewalls > SonicWall SuperMassive E10000 Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall NSA Series
YES
NO