?– Some transform sets are not supported.
??” The Cisco Easy VPN Remote feature does not support transform sets
that provide encryption without authentication (ESP-DES and ESP-
3DES) or transform sets that provide authentication without encryption
(ESP-NULL, ESP-SHA-HMAC, and ESP-NULL ESP-MD5-HMAC).
??” Cisco VPN Client and server do not support Authentication Header (AH)
authentication but do support Encapsulating Security Payload (ESP).
304 Chapter 8: Extending the Network into the WAN
IPsec SSL VPN (WebVPN)
Cisco IOS IPsec/SSL??“based VPN, also known as WebVPN, is an emerging technology that
provides remote-access connectivity from almost any Internet-enabled location using a web
browser and its native SSL encryption. WebVPN provides the ?¬‚exibility to support secure
access for all users, regardless of the endpoint host from which they establish a connection.
If application access requirements are modest, WebVPN does not require a software client
to be preinstalled on the endpoint host. This ability enables companies to extend their
secure enterprise networks to any authorized user by providing remote-access connectivity
to corporate resources from any Internet-enabled location.
Pages:
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453