Resolved! Is AES-256-CBC the same as AES-256-SHA?
Trying to VPN peer an ASA 5505 to a 3rd party's Palo Alto. The only IKE/IPSec options they have are CBC and GCM. Are either of those the same as the AES256-SHA that the ASA's support or am I out of luck?