Fingerprinting VPN firewalls is possible with which of the following tools?

Angry IP Scanner is a general-purpose IP address and port scanner with no capability to interpret IKE protocol responses or fingerprint VPN gateways.

Nikto is a web server vulnerability scanner targeting HTTP and HTTPS services and has no functionality for probing IKE or any VPN protocol.

Ike-scan works by sending IKE Phase 1 (Main Mode and Aggressive Mode) packets to target hosts and analyzing the handshake responses to identify the vendor, firmware version, and configuration of VPN endpoints. Because IKE is the key exchange protocol underlying IPSec VPNs, ike-scan is specifically designed for this fingerprinting task. The tool identifies specific firewall products using vendor IDs and transform sets returned during the IKE negotiation.

Arp-scan operates at Layer 2 using ARP requests to discover hosts on a local network segment and cannot interact with or fingerprint VPN firewalls using IKE.