Hi,
I have question if it is secure to use SSTP with AES on Router OS 6.4 + Windows 7?
- I mean force-aes = yes, because there is article describing that SSL 3.0 and TLS 1.0 are vulnerable, and thus RC4 is recommended. Which is described also in this forum.
Next question is it compatible with Windows?
- Because there is described that "If enabled windows clients (supports only RC4) will be unable to connect."
- Also in the forum it is described that it is not supported, because Windows does not support it.
- But according to this page TLS 1.2 is supported since Windows 7.
So questions...
1) What version of TLS is supported by latest RouterOS?
2) Can I configure particular TLS version on RouterOS?
3) Is possible this targeted configuration?
- Mikrotik RouterOS SSTP VPN server with TLS 1.2 + force AES
- Windows 7 VPN client + TLS 1.2 + AES
4) Has anybody tested it?