topic Re: IKE/IPSec DH Group 21 in Expedition Discussions

IKE/IPSec DH Group 21

spapesh — Thu, 22 Dec 2022 22:36:58 GMT

Currently running version 1.2.47

I have over 100 IPSec tunnels using DH Group 21 on a Cisco ASA. I am moving to a Palo 3430. The migration tool does not allow DH Group 21. However, PanOS version 10.2 added this DH Group. Can the migration tool be updated to accept this DH Group?

Re: IKE/IPSec DH Group 21

lychiang — Thu, 22 Dec 2022 23:32:09 GMT

Hi @spapesh Yes, we can look into this and add it in to the new version of the release.

Re: IKE/IPSec DH Group 21

spapesh — Wed, 25 Jan 2023 21:51:22 GMT

I see 1.2.49 was updated to use Group 21. This will save me time when I migrate multiple ASA configs. Thank you!