topic IPSec Version in General Topics

IPSec Version

Chana88 — Wed, 16 Jun 2021 01:54:49 GMT

For audit purposes we neeed to know if paloalto is using IPSec version 3 or version 2?

Re: IPSec Version

aleksandar.astardzhiev — Wed, 16 Jun 2021 07:14:14 GMT

Version of what? IPsec is not single protocol, but suite of different protocols working together. So there is no such think as IPsec version 2 or 3, to my knowledge.

Can you provide the exact question defined by the auditor?

In addition the answer to this question will really depend on your configuration, as FW can support almost any type of configuration.

Re: IPSec Version

Chana88 — Wed, 16 Jun 2021 07:37:59 GMT

Hi @aleksandar.astardzhiev Thanks for the reply. My understanding was same as yours.

However as per below RFC 2411 we have versions for IPSec. Auditors wanna know which version PA use.

https://datatracker.ietf.org/doc/html/rfc6071

BR,

Chana

Re: IPSec Version

S.Cantwell — Wed, 23 Jun 2021 15:11:06 GMT

The PANW will be using IPSec v3.