Citrix SD-WAN

Enable and Configure Virtual WAN Security and Encryption (Optional)

March 12, 2021

Contributed by:

S C

To enable and configure Virtual WAN security and encryption, do the following:

Note

Enabling Virtual WAN security and encryption is optional.

Navigate to the Basic tab in the Configuration Editor, Select Global from View mode. The Virtual Network Settings configuration form is displayed.
Click Edit (pencil icon) to enable editing for the form.
Enter your global security settings. The options are as follows:
- Network Encryption Mode – This is the encryption algorithm used for encrypted paths. Select one of the following from the drop-down menu: AES 128 Bits or AES 256 Bits.
- Enable Encryption Key Rotation: When enabled, encryption keys are rotated at intervals of 10–15 minutes.
- Enable Extended Packet Encryption Header: When enabled, a 16 bytes encrypted counter is prepended to encrypted traffic to serve as an initialization vector, and randomize packet encryption.
- Enable Extended Packet Authentication Trailer: When enabled, an authentication code is appended to the contents of the encrypted traffic to verify that the message is delivered unaltered.
- Extended Packet Authentication Trailer Type: This is the type of trailer used to validate packet contents. Select one of the following from the drop-down menu: 32-Bit Checksum or SHA-256.
Click Apply to apply your settings to the configuration.

This completes the configuration of the MCN site. The next step is to name and save the new MCN site configuration (optional, but recommended), as described in the following section.

Warning

If your console session times out or you log out of the Management Web Interface before saving your configuration, any unsaved configuration changes are lost. You must then log back into the system, and repeat the configuration procedure from the beginning. For that reason, it is recommended that you save the configuration package often, or at key points in the configuration.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Enable and Configure Virtual WAN Security and Encryption (Optional)

March 12, 2021

Contributed by:

S C

March 12, 2021

Contributed by:

S C

Enable and Configure Virtual WAN Security and Encryption (Optional)

In this article