Quick Reference Guide

ProSafe VPN Firewall FVS318v3 Reference Manual

5-4 Advanced Virtual Private Networking

v5.0, January 2012

Direction/Type This setting is used when determining if the IKE policy matches the current

traffic. The drop-down menu includes the following:

• Initiator — Outgoing connections are allowed, but incoming are blocked.

• Responder — Incoming connections are allowed, but outgoing are

blocked.

• Both Directions — Both outgoing and incoming connections are allowed.

• Remote Access — This is to allow only incoming client connections,

where the IP address of the remote client is unknown.

If Remote Access is selected, the Exchange Mode must be Aggressive,

and the Identities below (both Local and Remote) must be Name. On the

matching VPN Policy, the IP address of the remote VPN endpoint should

be set to 0.0.0.0.

Exchange Mode Main Mode or Aggressive Mode. This setting must match the setting used

on the remote VPN endpoint.

• Main Mode is slower but more secure. Also, the Identity below must be

established by IP address.

• Aggressive Mode is faster but less secure. The Identity below can be by

name (host name, domain name, and e-mail address) instead of by IP

address.

Local These parameters apply to the Local VPN firewall.

Local Identity Type Use this field to identify the local FVS318v3. You can choose one of the

following four options from the drop-down list:

• By its Internet (WAN) port IP address.

• By its Fully Qualified Domain Name (FQDN) — your domain name.

• By a Fully Qualified User Name — your name, E-mail address, or

other ID.

• By DER ASN.1 DN — the binary DER encoding of your ASN.1 X.500

Distinguished Name.

Local Identity Data This field lets you identify the local FVS318v3 by name.

Remote These parameters apply to the target remote FVS318v3, VPN gateway, or

VPN client.

Remote Identity Type Use this field to identify the remote FVS318v3. You can choose one of the