IKE/IPSec DH Group 21

[spapesh]

Currently running version 1.2.47

I have over 100 IPSec tunnels using DH Group 21 on a Cisco ASA. I am moving to a Palo 3430. The migration tool does not allow DH Group 21. However, PanOS version 10.2 added this DH Group. Can the migration tool be updated to accept this DH Group?

[lychiang]

Hi @spapesh Yes, we can look into this and add it in to the new version of the release. 

[spapesh]

I see 1.2.49 was updated to use Group 21. This will save me time when I migrate multiple ASA configs. Thank you!