Query on IKEv2 Phase2 parameters

[Connected123]

Hello,

We are thinking of peering Cisco ISR G2 Router with PA-VM (deployed in Azure).

In Cisco, ESP-AES-256 is used for Encryption and ESP-SHA-256 is used for Authentication.

I can see that these two options are not available in PA-VM.

In that case, what should we select in PA-VM so that we can create a site-to-site tunnel with the Cisco peer?

Thanks in advance.

[SebRupik]

Hi there,

Under Network -> Network Profiles -> IPSec Crypto :

The Palo equivalent would be:

• IPSec protocol : ESP
• Encryption: AES-256-CBC
• Authentication: SHA-256

Although not explicitly referenced in the config, cisco uses CBC. I will see if I can find a command reference/ document.

cheers,

Seb.