topic Re: Implementing Remote Access VPN in Secure Firewall in Evaluation Mo in Network Security

Implementing Remote Access VPN in Secure Firewall in Evaluation Mode

rezaalikhani — Fri, 03 Oct 2025 11:15:53 GMT

Hello everyone,

I would like to know if it is possible to implement Remote Access VPN on Cisco Secure Firewall while running in Evaluation Mode?

I have already completed all the required configuration steps and enabled IPsec/IKEv2 with the DES algorithm. However, when the client attempts to connect to the firewall remotely, it encounters the following event:

Any ideas?

Thanks

Re: Implementing Remote Access VPN in Secure Firewall in Evaluation Mo

Marvin Rhoads — Fri, 03 Oct 2025 14:11:47 GMT

The web portal (for client services) will require strong encryption for SSL/TLS to securely negotiate with any modern browser. For that you will need a registered license associated with a Smart License account.

You can get a registered evaluation license - either via your partner or (if you are a partner yourself) directly from Cisco via a Global Virtual Engineering (GVE) request.

Re: Implementing Remote Access VPN in Secure Firewall in Evaluation Mo

Marvin Rhoads — Mon, 06 Oct 2025 14:41:41 GMT

@rezaalikhani please note further that when the Secure Client negotiates the SSL/TLS handshake with a VPN headend, it will propose 22 supported cipher suites (see below). What they all have in common is that they all use AES128 or AES256. If the headend does not have a license from Cisco, it will not support AES of any type and thus the error you cited will appear.

Re: Implementing Remote Access VPN in Secure Firewall in Evaluation Mo

rezaalikhani — Mon, 06 Oct 2025 14:41:58 GMT

Thanks a lot. Very informative... I appreciate the help.