[OmniOS-discuss] [discuss] Logjam & IKE

[Dan McDonald]

> On May 20, 2015, at 10:06 AM, Jonathan Adams <t12nslookup at gmail.com> wrote:
> 
> Thanks for the heads up ... we have quite a few IKE/ipsec connections, although static ip addresses are used.  They've been in use since forever ...
> 
> fortunately we use 5 for all the connections.

You should really move up to 2048-bit MODP or use one of the 256-or-higher ECC groups.  Do you have legacy reasons not to?

Dan