GPX X642 - Manual (Page 142)

142
• Certificate Authentication—Allows any hosts or subnet of hosts to authenticate for IPSec.
Each host must have a public/private key pair. Validate Peer Certificate is enabled by default,
requiring each host to have a signed certificate. The certificate authority certificate must be
installed. Each host must have its identifier in the Subject Alternate Name of the signed
certificate.
Note: After an MFP is configured for IPSec with a host, IPSec is required for any IP
communication to take place.
5 Indicate the setting for each sub-item as required for the network environment.
6 Click Submit.