Canon Color imageCLASS LBP712Cdn imageCLASS LBP712Cdn User Guide - Page 307

Security Configuring IPSec Settings 0YS1-04R Internet Protocol Security (IPSec or IPsec) is a protocol suite for encrypting data transported over a network, including Internet networks. While TLS only encrypts data used on a specific application, such as a Web browser or an e-mail application, IPSec encrypts either whole IP packets or the payloads of IP packets, offering a more versatile security system. The IPSec of the machine works in transport mode, in which the payloads of IP packets are encrypted. With this feature, the machine can connect directly to a computer that is in the same virtual private network (VPN). Check the system requirements and set the necessary configuration on the computer before you configure the machine. Registering Security Policies(P. 302) Enabling IPSec Communication(P. 309) System Requirements IPSec that is supported by the machine conforms to RFC4301, RFC4302, RFC4303, and RFC4305. Operating systems supported by communication partners Windows Vista/7/8/10/Server 2003/Server 2008/Server 2012 Connection mode Transport mode IKEv1 Print Mode ● Main mode ● Aggressive mode Authentication method ● Pre-shared key ● Digital signature Key exchange protocol Hash algorithm ● HMAC-MD5-96 ● HMAC-SHA1-96 Encryption algorithm (and key length) ● 3DES-CBC ● AES-CBC (128 bits, 192 bits, or 256 bits) Diffie-Hellman (DH) Key exchange algorithm/group (and key length) ● Group 1 (768 bits) ● Group 2 (1024 bits) ● Group 14 (2048 bits) ESP (Encapsulating Security Payload) Hash algorithm Encryption algorithm (and key length) ● HMAC-MD5-96 ● HMAC-SHA1-96 ● 3DES-CBC ● AES-CBC (128 bits, 192 bits, or 256 bits) AH (Authentication Header) Hash algorithm ● HMAC-MD5-96 ● HMAC-SHA1-96 301