PAN 7.1.9 aes-256-cbc vs PAN 6.1.10 aes256

palomed — Thu, 13 Jul 2017 00:45:58 GMT

I need to move a tunnel from a PAN with 6.1.10. The tunnel today uses aes256 for IPSec crypto and for IKE. The tunnel established fine to our biz partner.

In configuring the tunnel on the other PAN with 7.1.9 I notice that my options are aes-256-cbc or aes-256-gcm for IPSec and IKE Crypto, Add offered aes-256-cbc. My question: If I select aes-256-cbc for both should the tunnel likely remain compatible with the biz parnter if it worked before? I think they're using Cisco but not certain actually. TY

Re: PAN 7.1.9 aes-256-cbc vs PAN 6.1.10 aes256

Remo — Thu, 13 Jul 2017 01:53:32 GMT

Hi @palomed

Yes, if you choose aes-256-cbc in 7.1.x, this will be the same as aes-256 in 6.1.x

Regards,

Remo

topic Re: PAN 7.1.9 aes-256-cbc vs PAN 6.1.10 aes256 in General Topics

PAN 7.1.9 aes-256-cbc vs PAN 6.1.10 aes256

Re: PAN 7.1.9 aes-256-cbc vs PAN 6.1.10 aes256