Product Overview

The IPSec VPN gateway provides users with three-layer network data protection based on the IPSec (Internet Protocol Security) protocol, offering security services such as data integrity protection, data source authentication, payload confidentiality, and resistance to replay attacks. The product supports entity authentication to authenticate data sources, and supports the national standard ISAKMP protocol and ESP encryption protocol to protect data integrity, confidentiality, and resist replay attacks. The product has undergone localization compatibility adaptation and can provide a Xinchuang version.

Features

Data integrity protection:Use the national standard ISAKMP protocol and ESP protocol to perform security integrity verification and secure encapsulation of data, ensuring the integrity of the data transmission process.

Data source identification:The key negotiation is implemented using the national standard ISAKMP protocol, and the negotiation process adopts entity authentication. Only data packets authenticated by entities can be recognized.

Load confidentiality:Using the national standard ISAKMP protocol for key negotiation, the negotiation process strictly follows the standard to encrypt and protect SSP data, ensuring the confidentiality of the payload.

Anti replay attack:Use the national standard ISAKMP protocol to negotiate keys, and use the ESP protocol to securely encapsulate data to resist replay attacks.

典型部署