PAN 7.1.9 aes-256-cbc vs PAN 6.1.10 aes256

[palomed]

I need to move a tunnel from a PAN with 6.1.10. The tunnel today uses aes256 for IPSec crypto and for IKE. The tunnel established fine to our biz partner.

In configuring the tunnel on the other PAN with 7.1.9 I notice that my options are aes-256-cbc or aes-256-gcm for IPSec and IKE Crypto, Add offered aes-256-cbc. My question: If I select aes-256-cbc for both should the tunnel likely remain compatible with the biz parnter if it worked before? I think they're using Cisco but not certain actually. TY

[Remo · Accepted solution]

Hi @palomed

Yes, if you choose aes-256-cbc in 7.1.x, this will be the same as aes-256 in 6.1.x

Regards,

Remo