Turn on Enhanced VPN Security

From Maiden-34 in Smoothwall On-Premise Appliance, you can use Enhanced VPN Security to apply these settings:

• use data-ciphers AES-256-GCM and use data-ciphers-fallback AES-256-GCM: Uses a more recent encryption algorithm.
• use auth SHA256: Changes the hashing algorithm to SHA256.
• disable comp-lzo: Turns off compression to prevent known attacks.
• Server and client Use tls-crypt: Uses fully encrypted TLS Authentication.
• Client uses fingerprinting of the server certificate in client configs: Prevents Man-in-the-Middle (MITM) attacks by allowing the client to connect only to servers with a specific certificate fingerprint, without requiring the server certificate.

Turn on Enhanced VPN Security

1. Go to Network > VPN > Global.
2. In the SSL VPN settings section, select the Enhanced VPN Security checkbox.
3. Select Save.
4. In the banner at the top of the page, select Restart.