Exceeds CNSA Suite guidelines out of the box.
Standard networks use two layers of AES-256, with independent 4096-bit RSA keys for the initial key exchange and subsequent rotations.
Yes. Dispel's remote access tunnels end at the OT DMZ, outside of your security stack. This means your Layer 7 firewalls can read data in the clear.