cisco asa 5516-X version 9.x support AES-GCM

[m.petrov1]

Hi,

I want to know if cisco asa 5516-X version 9.x support for IPsec encryption with AES-GCM and IPsec integrity with SHA-256, SHA-384 or SHA-512 for S2S VPN with Azure.

[balaji.bandi]

Look at the relases and features :

https://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/asa_new_features.html

[m.petrov1]

Thanks, but I found this information on site of Microsoft Azure for Cisco ASA:
Support for IPsec Encryption with AES-GCM and IPsec Integrity with SHA-256, SHA-384, or SHA-512, requires ASA version 9.x. This support requirement applies to newer ASA devices. At the time of publication, ASA models 5505, 5510, 5520, 5540, 5550, and 5580 do not support these algorithms. Consult your VPN device specifications to verify the algorithms that are supported for your VPN device models and firmware versions.

My cisco ASA is version 9.8(2).

[Rob Ingram · Accepted solution]

@m.petrov1 the information you provided refers to the older ASA model hardware, the 5516-X supports IKEv2 so you can use those algorithms.

[balaji.bandi]

yes it support the version i have provided for your models

[Rob Ingram · Accepted solution]

@m.petrov1 yes, the ASA 5516-X supports it, you will need to use IKEv2 though. From memory it was introduced in 8.x, so if you are running 9.x you should be fine.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/vpn/asa-98-vpn-config/vpn-ike.html