Gaia R81.10 SNX encryption discussion

[Herschel_Liang]

Gaia R81.10 SNX Supported 2 Encryption methods:
AES, 3DES;
AES, 3DES or RC4
The client want to konw which key length on AES encryption on it? AES-128?AES-192?AES-256? Can it force the SNX client to use only the AES encryption but not 3DES or RC4 cause they have higher cybersecurity requirement?

Is sk112314 solution suitable for Gaia, too?

[G_W_Albrecht]

Yes, by disabling 3DES and RC4 ciphers (as per sk113114 and sk106478 respectively). AES-128 is best for performance, see sk105119: Best Practices - VPN Performance