Filter
Top Products
ADE-4300/ADW-4300 User Guide
82
IPSec PFS (Per-
fect Forward
Secrecy)
If enabled, security is enhanced by ensuring that the key is
changed at regular intervals. Also, even if one key is broken,
subsequent keys are no easier to break. (Each key has no
relationship to the previous key.)
This setting applies to both IKE and IPSec SAs. When con-
figuring the remote endpoint to match this setting, you may
have to specify the "Key Group" used. For this device, the
"Key Group" is the same as the "DH Group" setting in the IKE
section.