NetScreen-Remote Features
| Feature | NetScreen-Remote | |||
| VPN | Manual Key, IKE, PKI (X.509) | Yes | ||
| DES (56-bit) and 3DES (168-bit) encryption algorithms | Yes | |||
| ESP and AH | Yes | |||
| Tunnel or transport mode | Yes | |||
| Layer 2 Tunnel Protocol (L2TP) | Yes | |||
| NAT traversal | Yes | |||
|
| ||||
| IPSec | Key management | |||
| Manual | Yes | |||
| KE/ISAKMP (Main,Quick, Aggressive Modes) | Yes | |||
| MD5 | Yes | |||
| SHA-1 | Yes | |||
| Certificate requests/standards | ||||
| PKCS 7 | Yes | |||
| PKCS 10 | Yes | |||
| PKCS 12 | Yes | |||
| SCEP | Yes | |||
| MSCAPI Integration | Yes | |||
| Certificate manager utility | Yes | |||
| X.509 certificate request generation tool | Yes | |||
| Smart Cards | ||||
| Datakey CSP | Yes | |||
| Schlumberger CSP | Yes | |||
| Certificate servers supported | ||||
| Verisign On Site CA | Yes | |||
| Entrust CA with VPN Connector | Yes | |||
| Microsoft CA | Yes | |||
| RSA Keon CA | Yes | |||
| iPlanet (Netscape) CMS CA | Yes | |||
| Baltimore Unicert CA | Yes | |||
| DODPKI CA | Yes | |||
|
| ||||
| High Availability (HA) | Redundant gateways | Yes | ||
| Exchange [IKE] keepalives | Yes | |||
|
| ||||
| User Authentication | Extended authentication protocol [Xauth] Version 6 | Yes | ||
|
| ||||
| Administration | Secure, authenticated policy retrieval | Yes | ||
| Administration GUI | Yes | |||
| Import/export of security configuration files | Yes | |||
| Lock down of client configurations | Yes | |||
| Certificate manager utility | Yes | |||
|
| ||||
| Logging/Monitoring | Diagnostic log/connection monitor | Yes | ||
|
| ||||