Security improvements have been made in this release, however some limitations still exist.

While the OS does support IKEv1, Ciena strongly recommends that IKEv2 is used to avoid security vulnerabilities associated with IKEv1, such as reflector and Amplifier DoS attacks.

There have been IPsec throughput improvements throughout.