does PA support encryption AES-256-SHA and AES-SHA-HMAC-256?

MP18 — Thu, 10 Jan 2019 17:21:55 GMT

I need to setup VPN tunnel with Cisco ASA

Does PA support Phase 1 - AES-256-SHA?

Phase 2

AES-SHA-HMAC-256?

I can only see AES-256-Scdc encryption?

Re: does PA support encryption AES-256-SHA and AES-SHA-HMAC-256?

Remo — Sat, 12 Jan 2019 20:05:11 GMT

Are you sure on cisco side it is called "AES-SHA-HMAC-256"? Because from cisco naming I know this is not called like this.

Anyway Paloalto supports the requirements you have (AES256-cbc, SHA1, SHA256) as on Cisco side when there is only AES256 it means AES256-cbc.

(The encryption is done with AES256 algorithm - SHA1/SHA256 are algorithms for dataintegrity)

Regards,

Remo