Skip to main content
Peddy1976
Peddy1976
Visitor III
July 31, 2018
Question

PCI Compliance for DialUP VPN

  • July 31, 2018
  • 1 reply
  • 2558 views

Hi All,

 

we implemented a Dial-Up VPN solution with the following properties:

 

- IkeV1 Aggressive Mode, since the clients are connection from unknown peers

- XAUTH with external radius

 

It seems now that Aggressive Mode is not compliant with PCI, so we need to think some changes to apply. Main mode or Ikev2 are not suitables for our solution, since with Ikev2 the XAuth is not available and main mode does not apply with dynamics peer.

 

Could someone give me some suggestions on how to handle this problem?

 

Best regards,

Mauri

    1 reply

    emnoc
    emnoc
    New Member
    July 31, 2018

    You have your answer already, Using IKEv2 and EAP. As long as you  stay with IKEv1 you are going to be aggressive mode.

     

    The next option is to drop  IPSEC and use SSL and issue   certificate and enable TLSv1.2 support. You have to weigh the org needs and compatibility issues 

     

    Ken

    Terms & ConditionsAccessibility statement