Common use of IPSEC configuration Clause in Contracts

IPSEC configuration. C.3.1 IP interconnect will require the use of IPsec, SRTP or TLS for the security of underlying layers C.3.2 The following guidelines are to be followed for IPsec implementation: • Tunnel mode only is supported for IPsec. Transparent mode is not supported. • 4 types of transform sets are supported: ‘esp-3des-md5’, ‘esp-3des-sha1’, ‘esp- aes128-md5’, ‘esp-aes128-sha1’. ‘esp-3des-md5’ is the preferred transform set. • ‘Main Mode’ is the only method supported for IKE negotiation. ‘Aggressive Mode’ is not supported. • Perfect Forward Secrecy (PFS) shall be used in ‘group 2’.

IPSEC configuration. C.3.1 IP interconnect will require the use of IPsec, SRTP or TLS for the security of underlying layers C.3.2 The following guidelines are to be followed for IPsec implementation: •  Tunnel mode only is supported for IPsec. Transparent mode is not supported. •  4 types of transform sets are supported: ‘esp-3des-md5esp‐3des‐md5’, ‘esp-3des-sha1esp‐3des‐sha1’, ‘esp- aes128-md5esp‐aes128‐md5’, ‘esp-aes128-sha1esp‐aes128‐sha1’. ‘esp-3des-md5esp‐3des‐md5’ is the preferred transform set. •  ‘Main Mode’ is the only method supported for IKE negotiation. ‘Aggressive Mode’ is not supported. •  Perfect Forward Secrecy (PFS) shall be used in ‘group 2’.

IPSEC configuration. C.3.1 IP interconnect will require the use of IPsec, SRTP or TLS for the security of underlying layers C.3.2 The following guidelines are to be followed for IPsec implementation: • Tunnel mode only is supported for IPsec. Transparent mode is not supported. • 4 types of transform sets are supported: ‘esp-3des-md5’, ‘esp-3des-esp-3des- sha1’, ‘esp- esp-aes128-md5’, ‘esp-aes128-sha1’. ‘esp-3des-md5’ is the preferred transform set. • ‘Main Mode’ is the only method supported for IKE negotiation. ‘Aggressive Mode’ is not supported. • Perfect Forward Secrecy (PFS) shall be used in ‘group 2’.