This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Will UTM 9 support "AES-GCM" cipher in future?

Greetings to all,

we are using OpenVPN Clients to connect to our SOPHOS UTM 9. The newer Versions of OpenVPN do declare the "cipher" option as "deprecated" and don't support the "CBC" ciphers per default anymore. For now thats not really a problem, because you can change the client configuration to make it compatible again.

If any of you worries about the same issue, please vote here "https://ideas.sophos.com/forums/17359-sg-utm/suggestions/42719291-update-openvpn-ssl-vpn-encryption-algorithm-s".

Thanks in advance!

This thread was automatically locked due to age.

Top Replies

Michael Bruegmann over 2 years ago in reply to LuCar Toni +1

Thanks, but would be offtopic :)

0 LuCar Toni over 2 years ago

This will be implemented in the next SFOS (XG) Version, if you mind to look into this product.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Bruegmann over 2 years ago in reply to LuCar Toni

Thanks for your reply. But switching to XG at the moment is unfortunately not an option for us.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to Michael Bruegmann

Do you want to talk about the reason behind this statement?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Bruegmann over 2 years ago in reply to LuCar Toni

Thanks, but would be offtopic :)
Cancel
Vote Up +1 Vote Down

Cancel
0 BAlfson over 2 years ago

Hallo Michael,

If this is what you're talking about, I've been using it for over 3 years:

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 mfpck over 2 years ago in reply to BAlfson

Hi,

You're using these settings for site2site right or also for Road Warriors ?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 2 years ago in reply to mfpck

Both

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 mfpck over 2 years ago in reply to BAlfson

Ok. cool but you do not have windows 10 clients or you not using the built-in vpn click wizard and deploying the vpns via powershell, right ?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 2 years ago in reply to mfpck

Sophos Connect for Windows 7, 8 and 10 or the [Download] button on the 'Remote Access' tab in the User Portal. Not deploying via Powershell.

In fact, virtually all of my clients use SSL VPN and/or L2TP/IPsec for remote access.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Bruegmann over 2 years ago

Hey,

im talking about remote access (SSL VPN).
Cancel
Vote Up 0 Vote Down

Cancel