Ciphers Used to Set Up IKEv2 Tunnels
IKEv2 tunnels
| Where Can I Use This? | What Do I Need? |
|---|
- NGFW managed by Panorama
- Windows and macOS endpoints
|
- GlobalProtect 6.4.1 Innovation
- PAN-OS 12.1.5 or later
|
GlobalProtect can restrict and/or set preferential order for what encryption and
authentication algorithm the GlobalProtect app can use for the IKEv2 tunnel. The
algorithms and preferences are defined in the GlobalProtect IKE
Crypto profile that you configure when you set up the tunnel for the
GlobalProtect gateway ().
The GlobalProtect IKE Crypto profile that you configure on the
gateway determines the encryption and authentication algorithm used to set up the IKEv2
tunnel. The GlobalProtect gateway responds with the first matching encryption algorithm
listed in the profile that matches the app’s proposal. The GlobalProtect app then
attempts to set up a tunnel based on the response from the gateway.
