Cisco ASA firewall or Firepower Appliance - IKEv2 RFC 5996 Compliance

[rthakker]

Hello Everyone,

I am trying to evaluate Cisco ASA firewalls for a client and struggling to test. End client is using strongswan vpn client which supports RFC 5996 feature of cached certificate or HASH_AND_URL. However I am not sure if this is supported feature. Could someone please tell me if current Cisco ASA firewalls (Any software v8.1 or later (including latest 9.6.1)) or Cisco Firepower Appliance supports IKEv2 RFC 5996 Compliance or not?   

Thanks

RT

[Florin Barhala]

I found here that's supported since 8.4
https://supportforums.cisco.com/t5/vpn/is-ikev2-support-on-cisco-asa-firewall/td-p/1517024

[rthakker]

Hi Florin,

Thank you for your suggestion but my issues is focused on support for cached certificate or HASH_AND_URL which is documented under RFC 5996. 

RT