Re: Firewall-1 Information leak

[Grzegorz Mucha <grzegorz.mucha () solidex com pl>]

Stephen JT Bourike wrote:
> Actually, since 4.1 SP-3 the use of Hybrid IKE mode has worked fairly well.
> SP-4 fixes some of the outstanding problems and it is now possible to use
> strongly-authenticated SecuRemote sessions with IKE encryption and key
> exchange.

Sure, but you can use Hybrid Mode for authentication of new sessions but
you still need to use public key (so the CA) or static password
(preshared secret) for getting the network topology to get or update
youre site, because of implementation of internal CA in Management
Module.
Fortunately it changes in NG.

Grzes