Supported IPsec settings
For IPsec connectivity, your edge device must be configured to use Forcepoint-supported IKE tunnel negotiation and IPsec encryption settings.
You can also view the following supported IPsec settings from Forcepoint Data Security Cloud | SSE by navigating to the section of the primary or secondary IPsec tunnel.
| Setting | Supported (recommended in bold) |
|---|---|
| IKE version | IKEv2 |
| Ciphers |
AES-128 AES-256 |
| Digest | SHA2 256bit |
| DH Groups |
14 19 20 |
| Auth Method | Pre-shared key |
| Lifetime | 24 hours |
| PFS (Perfect Forward Secrecy) | Not supported |
| IKE ID Support |
FQDN (hostname) Public IP Address |
| Setting | Supported (recommended in bold) |
|---|---|
| Type | ESP |
| Digest | SHA2 256bit |
| Lifetime | 8 hours |
| Ciphers |
AES-GCM-128 AES-GCM-256 AES-128 AES-256 Null |