Does or when will Palo Alto support IKEv2?

[tstores]

I am just trying to confirm if Palo Alto supports IKEv2 at this time.

Thanks

[gswcowboy]

Currently it is not supported. However, there is a feature request previously submitted. Please submit an FR through your Sales Team (FR ID: 1683)

-Renato

[tstores]

Palo Alto may want to expedite this feature request because I just received a call from one of our customers who stated that to become PCI compliant, they are required to use IKEv2. They are using Cisco ASA's.

[hheck]

It would also be nice because this is required for VPN on Windows Phone 8.1.

[AndrewHenderson]

Just hit this brick wall when trying to move our Azure VPNs from a Juniper to the Palo, no IKEv2??? The Junipers are 7 years old and they have it. Really stuck now, looks like our old Junipers are going to have to stay running just for these VPN's. We used IKEv1 with Azure but had countless problems and changed after a long support case with MS so going back really isn't an option.

Andy

[ericgearhart]

Andie there's a blog post here where the guy seems to have had luck with IKEv1, routed VPNs and Palo Alto...

Stuff I've learnt: IPSec VPNs and IKE

[AndrewHenderson]

Hi, we can get it to work with IKEv1 but the link is not reliable, it kept dropping at the MS side. In the end after lots of testing with MS their only solution was to change to IKEv2 which has not failed yet.

[ericgearhart]

Ahh I see. Ouch.

[panagent · Accepted solution]

IKEv2 is supported with PAN-OS 7.0.  See PAN-OS 7.0 Release Notes: VPN Features

Related information:

Configuring IKEv2 for Microsoft Azure Environment

[pankaku]

IKEV2 is currently supported by PA and it is available from PAN OS 7.0

Please rate the helpful answer