https://live.paloaltonetworks.com/t5/next-generation-firewall/phase-1-compromise-impact-to-phase-2/m-p/522489#M618 <P>Hi,</P> <P>I would like to know if IKEv2 phase ia compromise because of weak encryption in proposal,&nbsp;<SPAN>malicious user&nbsp;</SPAN><SPAN>can access to all data sent across the VPN connection, which may include passwords and sensitive file ?</SPAN></P> <P>&nbsp;</P> <P>Or</P> <P>Malicious user only know phase 1 proposal and it cannot be impact phase 2 if we are suing strong encryption on phase 2 ?&nbsp;</P> Sun, 27 Nov 2022 15:07:11 GMT crypto 2022-11-27T15:07:11Z https://live.paloaltonetworks.com/t5/next-generation-firewall/phase-1-compromise-impact-to-phase-2/m-p/522489#M618 <P>Hi,</P> <P>I would like to know if IKEv2 phase ia compromise because of weak encryption in proposal,&nbsp;<SPAN>malicious user&nbsp;</SPAN><SPAN>can access to all data sent across the VPN connection, which may include passwords and sensitive file ?</SPAN></P> <P>&nbsp;</P> <P>Or</P> <P>Malicious user only know phase 1 proposal and it cannot be impact phase 2 if we are suing strong encryption on phase 2 ?&nbsp;</P> Sun, 27 Nov 2022 15:07:11 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/phase-1-compromise-impact-to-phase-2/m-p/522489#M618 crypto 2022-11-27T15:07:11Z