Nokia IP265 Security Guide - Page 39

User Guidance

Page 39 highlights

Figure 8 - Only FIPS-Approved Algorithms Can Be Used with IPSec or IKE Note: This applies equally for either star or meshed VPN community properties 3.2 User Guidance The User accesses the module VPN functionality as an IPSec client. Although outside the boundary of the module, the User should be careful not to provide authentication information and session keys to other parties. The User should also make certain that no keys or CSPs are shared between the non-Approved mode and the Approved mode of operation when switching between modes of operation. To ensure that no sharing occurs, a User must zeroize all keys while in one mode of operation before switching to another mode of operation. © Copyright 2005, 2006, 2007 Nokia Page 39 of 43 This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43

Figure 8 – Only FIPS-Approved Algorithms Can Be Used with IPSec or IKE
Note: This applies equally for either star or meshed VPN community properties
3.2
User Guidance
The User accesses the module VPN functionality as an IPSec client.
Although outside the boundary of the module, the User should be careful
not to provide authentication information and session keys to other parties.
The User should also make certain that no keys or CSPs are shared
between the non-Approved mode and the Approved mode of operation
when switching between modes of operation. To ensure that no sharing
occurs, a User must zeroize all keys while in one mode of operation
before switching to another mode of operation.
© Copyright 2005, 2006, 2007
Nokia
Page 39 of 43
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.