Ensuring the compliance of a mobile IPsec client's configuration with DR mode

This section explains the options to enable and the settings to select to make the configuration of mobile IPsec clients compatible with the ANSSI's IPsec DR recommendations.

Reminder regarding Stormshield IPsec VPN clients

Only SN VPN Client Exclusive 7.4.018 (and higher versions) can set up VPN tunnels in DR mode with firewalls in an SNS version that complies with the ANSSI's IPsec DR recommendations.

If you are using Stormshield standard VPN clients, enabling DR mode requires it to be uninstalled to make way for SN VPN Client Exclusive (a specific license must be purchased).

On the client workstation:

  1. Uninstall SN VPN Client Standard
  2. Download the SN VPN Client Exclusive For more information, refer to the section Download this version in the Stormshield VPN Client Exclusive release notes.
  3. Install the SN VPN Client Exclusive For more information, refer to the section on Installation in the Stormshield VPN Client Exclusive administration guide.