Established network protocols such as Internet Key Exchange (IKE) / Internet Protocol Security (IPsec) and Transport Layer Security (TLS) are recognised standards that form the basis of secure networks. 

IKE and IPsec protocols are vital for maintaining the confidentiality and integrity of data transmitted over public networks, such as the Internet. A correctly configured IKE/IPsec set-up offers robust protection against data breaches, attacks and unauthorised access. However, complexities in implementation and configuration could expose security vulnerabilities if not addressed properly. 

Acknowledging the scarcity of qualified and reliable test tools, we have used our expertise in IKE/IPsec to develop a robust test suite. As a provider of cybersecurity ‘made in Germany’, our aim is to help make the German network infrastructure more secure and establish a defined standard of security. Manufacturers and test centres can now use our IKE/IPsec Inspector to ensure the security of devices and routers with IKE/IPsec functionality. 

The IKE/IPsec Inspector by achelos is already optimised and pre-configured to meet the requirements of the German Federal Office for Security and Information Technology (BSI) and Common Criteria. The test suite offers advanced automation features and the capability of integration into other systems.

Test your products, solutions and services for security and compliance regardless of the manufacturer. Effortlessly detect vulnerabilities and errors in your network connection’s implementation and configuration, and secure them in a targeted manner. 

Examine the entire IKE connection set-up, including mutual authentication and analyse responses to undesired behaviour. For example:

• Missing or incorrect communication parts
• Incorrect key material
• Incorrect certificates
• Unsuitable cipher suites
• Incorrect reaction to manipulations

achelos’ IKE/IPsec Inspector test suite provides flexible options, including automated test runs, along with robust test management functionality and diverse simulation environments. Comprehensive analyses assess the implementation of security protocols and documents results in a verifiable manner.

Test suites for IKE/IPsec are based on high security requirements

Strengthen the security of your IKE network connections with achelos’ manufacturer-neutral test suites, developed with an accredited testing laboratory. With their flexible architecture and implementation, the test suites are product-independent and can be used immediately!

The test case catalogue is continually expanding and is based on requirements from the following sources:

• Functional specifications
• Technical Guidelines (TR) published by the BSI
• Certifications
• Cryptographic standards
• Application notes for Common Criteria certification
• Evaluation standards
• Penetration tests
• Common Criteria documentation requirements

Automated test procedures for professionals

achelos supports

• Router manufacturers
• Evaluators and certification bodies 
• System operators
• IT departments in companies
• Public Institutions

to protect themselves from cyber attacks.

Numerous testing and evaluation institutions are already using  achelos’ test suites to perform tests as part of accredited testing procedures.

Architecture of the IKE/IPsec Inspector test environment

Our IKE/IPSec Inspector test environment features a modular architecture and implementation. This allows for the integration of various test suites, tools and simulations. Automated tests and detailed test reports are used to measure product quality. A powerful PC is all that’s needed. No special IT infrastructure or elaborate laboratory set-up is required.

• Prevention of IT-configuration errors 
• Compliance with BSI security guidelines 
• Cost savings through faster certification 
• Efficient testing thanks to advanced automation 
• Convenient simulation environment and ease of use 
• Test scope, test depth and attack scenarios can be customised 
• Reproducible and audit-proof documentation of test results

The IKE/IPsec Inspector is available including test tools. 

Optionally available:

• Simulation environment
• Software Development Kit (SDK)