Managing Certificates - NETGEAR FVX538v2 - ProSafe VPN Firewall Dual WAN Reference Manual

4. The remote VPN Endpoint must have a matching SA, or it will refuse the connection.
Only one client policy may configured at a time (noted by an "*" next to the policy name). The
List of VPN Policies contains the following fields:
• ! (Status). Indicates whether the policy is enabled (green circle) or disabled (grey circle). To
enable or disable a policy, check the radio box adjacent to the circle and click Enable or
Disable, as required.
• Name. Each policy is given a unique name (the Connection Name when using the VPN
Wizard).
• Type. The type is "Auto" or "Manual" as described previously (Auto is used during VPN
Wizard configuration).
• Local. IP address (either a single address, range of address or subnet address) on your local
LAN. Traffic must be from (or to) these addresses to be covered by this policy. (The subnet
address is supplied as the default IP address when using the VPN Wizard).
• Remote. IP address or address range of the remote network. Traffic must be to (or from) these
addresses to be covered by this policy. (The VPN Wizard default requires the remote LAN IP
address and subnet mask).
• AH. Authentication Header. The default setting using the VPN Wizard is SHA1. (This setting
must match the remote VPN.)
• ESP. Encapsulating Security Payload. The default setting using the VPN Wizard is 3DES.
(This setting must match the remote VPN.)
• Action. Allows you to access individual policies to make any changes or modifications.

Managing Certificates

Digital Self Certificates are used to authenticate the identity of users and systems, and are issued
by various CAs (Certification Authorities). Digital Certificates are used by this VPN firewall
during the IKE (Internet Key Exchange) authentication phase as an alternative authentication
method.
The VPN firewall uses Digital Certificates (also known as X509 Certificates) during the Internet
Key Exchange (IKE) authentication phase to authenticate connecting VPN gateways or clients, or
to be authenticated by remote entities. The same Digital Certificates are extended for secure web
access via SSL VPN connections over HTTPS.
Virtual Private Networking
ProSafe VPN Firewall 200 FVX538 Reference Manual
v1.0, January 2010
5-19