CA Data Protection provides the ability to specify varying levels of encryption when machines send data across the network.
In the GA (General Availability release) the options are as follows:
The network link is not encrypted.
Provides basic encryption (DES) with minimal impact on system performance.
Provides medium level encryption (2-key triple DES) with some impact on system performance.
Provides high level encryption (128 bit RC4) with minimal impact on system performance.
The RC4 encryption protocols employed in the General availability (GA) release have now been deprecated and have been superseded by more secure protocols.
FIX:RO98951 (Incorporating Server_15.20_HF0101, Server_x64_15.20_HF0102, Client_15.20_HF0103, Client_x64_15.20_HF0104 and Server_Native_x64_15.20_HF0105)has been released to provide more secure AES128 protocols for communications.
After deploying the fix, the protocols are enhanced as follows:
Provides high level encryption (128 bit AES with GCM and SHA256) with minimal impact on system performance.
This is now included in cumulative FIX:SO01003 (incorporating Server_15.20_HF0162, Server_x64_15.20_HF0163, Client_15.20_HF0164, Client_x64_15.20_HF0165 and Server_Native_x64_15.20_HF0166).