Overview | Architecture | Features | Deliverables | Related Products

• Supports Main Mode and Aggressive Mode of Phase-1
• Supports Quick Mode of Phase-2
• Supports Information Exchange Mode
• Supports Diffie-Hellman groups 1, 2, and 5
• Supports Pre-Shared Key and RSA Signature authentication methods
• Supports AES, 3-DES and DES for encryption
• Supports HMAC-MD5 and HMAC-SHA1 for authentication
• Supports AH and ESP IPSec Protocols
• Supports Transport and Tunnel Mode
• Supports SA Lifetime in Seconds and Kilobytes
• Provides support for Perfect Forward Secrecy
• Supports X.509 certificates
• Supports sending and receiving INITIAL-CONTACT, INVALID-SPI, and DELETE payloads
• Supports Virtualization: Multiple IKE Engines with independent SPD
• Supports a well-defined interface for interaction between IPSec and IKE. Can work with Aricent IPSec or any third party IPSec implementation.
• Supports well defined interface for Crypto functions. Adding new algorithms do not require any change to the protocol specific code
• Provides support for SNMP, CLI and Web-based management
• Highly portable code that uses flexible buffer and timer management libraries

Last updated : June 13, 2006