Site2Site VPN 3DES or AES

[J_Vansen_S]

Hi all;

I have 2units of ASA5510 with 3DES-AES license. One is to be deployed in HQ another unit at remote site.

I have been using the asdm VPN IPSec wizard to perform the configuration. I would like to know the recommended

[sean_evershed]

Do you mean is it recommended to deploy 3DES or AES? I think both are valid choices depending on your needs

A good reference for comparing 3DES to AES can be found here, the CCNA Security Exam guide

http://www.ciscopress.com/bookstore/product.asp?isbn=1587202204

See page 451, it states that:

"AES does run faster than 3DES on comparabable hardware....this is especially true when pure software encryption is used."

However the disadvantage of AES in comparison to 3DES is that it is a relatively new encryption algorithm.

"..  a more mature algorithm is always more trusted. That being the case,  3DES represents a more conservative yet more trusted choice in terms of  strength, because it has been analysed for nearly 35 years."