topic Re: Aggressive Mode Disable in Network Security

Aggressive Mode Disable

Nub65 — Tue, 04 Aug 2020 10:49:00 GMT

Hello,

We were suggested to disable isakmp Aggressive mode on Cisco Routers and on ASAs due to vulnerability reaso.

How will disabling this affect on current VPN connections on these devices?

Deepak Kumar — Tue, 04 Aug 2020 11:25:48 GMT

Hi,

You can use the command "crypto isakmp aggressive-mode disable".

Nub65 — Tue, 04 Aug 2020 11:32:37 GMT

Thank you for the replay.

My main concern is what happens to current VPN connections after disabling aggressive-mode.

Deepak Kumar — Tue, 04 Aug 2020 12:23:38 GMT

Hi,

VPN will disconnect during the next key renew time and VPN will try with main mode.