I know the title is an oxymoron, but our manufacturer is based in China, so I need to get as much information as possible so that management are aware of the risk/s and make this as air tight as possible.
I am working for a small startup with significant IP concerns and curious as to others experiences with setting up site-to-site VPNs in China, especially with these IP concerns in mind.
From what I can tell so far, in regards to just getting the VPN working/not blocked, the best and most reliable way to get around the GFW is to have a Chinese company register an IP address with the Chinese administration for VPN purposes. Luckily, we are working with a company in China who has significant presence within the government - on the flip side, that brings up further anxiety inducing questions on their agenda but that might just be the paranoid NetSec mind talking.
In regards to the VPN itself, we have Sophos XG firewalls - I am intending on using SSL with AES-256-CBC encryption, SHA2 512 authentication with a 2048-bit key. Are there any inherent concerns with this configuration?