This Software implements the IPsec Protocol standard and uses ISAKMP version 1.0 to negotiate security parameters with a VPN Gateway. In addition, it includes support for the XAuth protocol extension for user authentication and the Configuration Exchange extension for automatic client configuration.

Standard Edition Features

---

The following features are supported by the Standard Edition for Windows and the Open Source distribution except where otherwise specified.

Firewall Traversal Options

• NAT Traversal ( RFC & Draft 00-04 versions )
• NAT Keep Alive
• IKE Fragmentation

Authentications Methods

• Hybrid RSA + XAuth
• Mutual RSA + XAuth
• Mutual PSK + XAuth
• Mutual RSA
• Mutual PSK

Identification Types

• ASN1DN
• FQDN
• UFQDN
• Address
• Key Identifier

Exchange Modes

• Main
• Aggressive
• Configuration ( push or pull )
• Quick
• Informational

Phase1 Ciphers

• AES
• Blowfish
• 3DES
• CAST
• DES

Phase1 Hash Algorithms

• MD5
• SHA1

Phase2 Transforms

• ESP-AES
• ESP-Blowfish
• ESP-3DES
• ESP-CAST
• ESP-DES

Phase2 HMAC Algorithms

• HMAC-MD5
• HMAC-SHA1

Phase2 Options

• PFS is supported
• Tunnel mode is supported
• Transport mode is not supported
• Compression is not supported

Basic Configuration Exchange Attributes

• Banner
• Address
• Netmask
• WINS Server
• DNS Server

Advanced Configuration Exchange Attributes

• DNS Default Domain
• Login Banner
• Split Network Include List
• Split Network Exclude List
• PFS DH Group

Additional Functionality

• Automatic reconnect ( Windows Only )

Professional Edition Features

---

The following features are supported by the Professional Edition for Windows.

Advanced Configuration Exchange Attributes

• Split DNS Domain List

Additional Functionality

• DNS Transparent Proxy Service
• Secure AD/Domain Login