Mobile VPN with IPSec only supports aggressive mode.

Phase 1 Encryption - DES, 3DES, AES128, AES256įor devices with versions of iOS lower than 9.3, these Phase 1 and 2 settings are supported.ĭiffie-Hellman Group 5 is not supported on Apple devices for aggressive mode.

If Diffie-Hellman Group 2 is selected in the Phase 1 settings:

Phase 2 Encryption - 3DES, AES128, AES256.If Diffie-Hellman Group 14 is selected in the Phase 1 settings:

Supported Phase 1 and 2 Settingsįor devices with iOS 9.3 and higher or macOS 10.11.4 and higher, these combinations of Phase 1 and 2 settings are supported. The VPN client on the macOS or iOS device does not support split tunneling. You must configure Mobile VPN with IPSec for default-route VPN (0.0.0.0/0). For more information, see Install the IPSec Mobile VPN Client Software. To use the native IPSec VPN client to make a connection to your Firebox, you must configure the VPN settings on your Firebox to match those on the iOS or macOS device.įor IPSec VPN connections from a macOS device, you can also use the WatchGuard IPSec VPN Client for macOS. You can use this client to make an IPSec VPN connection to a Firebox. Use the macOS or iOS Native IPSec VPN ClientĪpple iOS devices (iPhone, iPad, and iPod Touch) and macOS 10.6 and higher devices include a native Cisco IPSec VPN client.

Mac ipsec vpn client free