topic Cisco ASA in Network Security

Cisco ASA

fastethernet — Mon, 11 Mar 2019 16:21:30 GMT

Hi All,

Can anyone confirm if any Cisco ASA supports the SHA-256 hashing algorithm whilst establishing a VPN tunnel?

Many thanks

Fastethernet

Re: Cisco ASA

Richard Burts — Wed, 30 Sep 2009 15:45:04 GMT

Fastethernet

From the Command Reference for the ASA, an option for the crypto isakmp policy hashing algorithm is: sha

Specifies SHA-1 (HMAC variant) as the hash algorithm for the IKE policy.

see this link for details:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/c5.html#wp2228816

for encrypting traffic for IPSec there is support for AES-256:

esp-aes-256 to use AES with a 256-bit key.

see this link for details:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/c5.html#wp2199475

HTH

Rick

Re: Cisco ASA

fastethernet — Wed, 30 Sep 2009 20:38:20 GMT

Hi Rick,

Thanks for the prompt response.

I wanted to run SHA 2 (SHA-224, SHA-256, SHA-384, or SHA-512) not SHA 1. Is there any way to use this hashing algorithm on an ASA?

Cheers

Fastethernet

Re: Cisco ASA

Richard Burts — Thu, 01 Oct 2009 10:55:06 GMT

Fastethernet

I am not aware of any option currently available to specify SHA-2 as the hashing algorithm on the ASA and my review of the command reference does not show any option for that.

HTH

Rick