does PA support encryption AES-256-SHA and AES-SHA-HMAC-256?

[MP18]

I need to setup VPN tunnel with Cisco ASA

Does PA support  Phase 1 - AES-256-SHA?

Phase 2 

AES-SHA-HMAC-256?

I can only see AES-256-Scdc encryption?

[vsys_remo · Accepted solution]

Hi @MP18

Are you sure on cisco side it is called "AES-SHA-HMAC-256"? Because from cisco naming I know this is not called like this.

Anyway Paloalto supports the requirements you have (AES256-cbc, SHA1, SHA256) as on Cisco side when there is only AES256 it means AES256-cbc. 

(The encryption is done with AES256 algorithm - SHA1/SHA256 are algorithms for dataintegrity)

Regards,

Remo

[vsys_remo · Accepted solution]

Hi @MP18

Are you sure on cisco side it is called "AES-SHA-HMAC-256"? Because from cisco naming I know this is not called like this.

Anyway Paloalto supports the requirements you have (AES256-cbc, SHA1, SHA256) as on Cisco side when there is only AES256 it means AES256-cbc. 

(The encryption is done with AES256 algorithm - SHA1/SHA256 are algorithms for dataintegrity)

Regards,

Remo