515e VPN encryption

[johnnymac]

Hi,

Can anyone tell me how i could change the encryption that our client to site uses from des/md5 to 3des/sha and if there is a common standard for what is considered to most secure.

Thanks

J Mack

[zulqurnain]

hi

as what i understood from your question you pix should have as following

--:Defines IPSec encryption and authentication algorithms

crypto ipsec transform-set yourname esp-3des esp-sha-hmac

--: Defines crypto map.

crypto map transam 1 set transform-set yourname

--: Defines ISAKMP policy.

isakmp policy 10 encryption 3des

isakmp policy 10 hash sha

if help full please rate it

[johnnymac]

Hi Thanks,

I am running a l2l as well as a client to site, is it ok to have them on different encryption levels.

[zulqurnain]

hi

i am not so sure as i have never tested such configuration or never came across but as for the understanding i believe not.