ZyXEL Communications P-334 - Manual (Page 170)

Prestige 334 User’s Guide
169 Chapter 15 VPN Screens
This may be unnecessary for data that does not require such security, so PFS is disabled
(None) by default in the Prestige. Disabling PFS means new authentication and encryption
keys are derived from the same root secret (which may have security implications in the long
run) but allows faster SA setup (by bypassing the Diffie-Hellman key exchange).
15.12 Configuring Advanced IKE Settings
Select Advanced at the bottom of the Rule Setup IKE screen. This is the Rule Setup IKE-
Advanced screen as shown next.