Configure Post-Quantum IKEv2 VPNs with RFC 9242 and RFC 9370 Hybrid Keys

Select
Network
Network Profiles
IKE Gateways
and
Add
a new gateway.
Configure the
General
settings and select either
IKEv2 only mode
or
IKEv2 preferred mode
as the
Version
.
In
IKEv2 only mode
, if the peer does not support IKEv2, the firewall aborts the connection. In
IKEv2 preferred mode
, if the peer does not support IKEv2, the firewall falls back to IKEv1. However, the VPN must negotiate IKEv2 to use the post-quantum VPN features, so if the firewall falls back to IKEv1, those features are not available.
IKEv1 is considered to be weak. If both IKE peers can support it, upgrade your VPN connections to IKEv2 and select
IKEv2 only mode
to ensure adequate levels of security and the ability to use PQ VPNs.
Select
Advanced Options
and configure the non-quantum options. Select
IKEv2
and configure the
General
settings.
General enables you to add an IKE Crypto profile, enable
IKEv2 Fragmentation
, and set the
Liveness Check
.
IKEv2 Fragmentation should be enabled when using PQC KEMs as the key sizes and data payloads are larger. Both VPN termination devices should be set to the same fragmentation values.
Enable Post-Quantum Key Exchange
for PQ KEM to enable using post-quantum resistance features on the VPN. This option is disabled by default.
Optionally, enable
Block IKEv2 if vulnerable cipher is used
. If this option is enabled, the firewall blocks all new IKEv2 peerings if it detects a vulnerable KEM is being used in the IKE Crypto profile. Existing VPN tunnels that came up beforehand can continue.
Click
OK
to create the IKE Gateway.
Select
Network
Network Profiles
IKE Crypto
and
Add
a new profile.
Configure the
General
settings and select the cryptographic components (DH Group, Encryption, Authentication, Timers) for the default IKEv2 key exchange.
Select a strong classic key exchange configuration to raise quantum resistance. DH Group 20 or higher, AES-256-GCM, and refresh the keys more frequently using the key lifetime. To completely regenerate the key at specific intervals, enable the IKEv2 Authentication Multiple by setting a value higher than zero. The key is regenerated after the multiple of the Key Lifetime is reached.
Select
Advanced Options
and configure the optional
Post-Quantum IKEv2 Additional Key Exchange
rounds.
A maximum of seven
Additional Key Exchange Rounds
(Round 1-7) are permitted in RFC 9370. At a minimum, one PQC KEM is required to add quantum resistance. Adding additional PQC KEMs further raises quantum resistance, but adds negotiation overhead and increases the size of the IKEv2 packets.
RFC 9370 allows additional key exchange rounds to be skipped. For skipped rounds, they can be left blank or set to
None
.
The order of the PQCs in the Additional Key Exchange Round sets the preference. The PQC listed at the top is preferred and is selected if the VPN termination device on the other side of the tunnel supports it. If you want to negotiate the strongest PQC that both sides can support, place the highest security level PQC at the top of the list in each Additional Key Exchange Round.
The VPN termination devices on both sides of the tunnel should be configured to the same PQC and security strength to minimize interoperability issues. To secure sensitive information for long periods of time, select a PQC with a security strength equivalent to Level 3 or higher.
Click
OK
to create the IKE Crypto profile.
Select
Network
Network Profiles
IPSec Crypto
and
Add
a new profile.
Configure the
General
settings and select the cryptographic components for the IPSec ESP protocol (Encryption, Authentication, DH Group, Lifetime).
Select a strong classic cryptographic configuration to raise quantum resistance. DH Group 20 or higher, AES-256-GCM, SHA384 or higher, and refresh the keys more frequently using the key lifetime.
Select the
Advanced Options
and configure the optional
Post-Quantum IPSec Additional Key Exchange
rounds.
A maximum of seven
Additional Key Exchange Rounds
(Round 1-7) are permitted and only one PQC KEM is permitted per round. At a minimum, one PQC KEM is required to add quantum resistance. Adding additional PQC KEMs further raises quantum resistance, but adds negotiation overhead and increases the size of the IPSec re-key packets.
Both sides of the IPSec tunnel must be configured with the same PQC and security strength level in each Additional Key Exchange Round. If there is a mismatch, the re-key operation fails.
To secure sensitive information for long periods of time, select a PQC with a security strength equivalent to Level 3 or higher.
Click
OK
to create the IPSec Crypto profile.
Commit
the configuration.
If you are not the administrator of both IKEv2 peers, communicate the IKEv2 gateway, IKE Crypto profile, and IPSec Crypto profile information to the peer's administrator for installation on their peer device.