Resolution
For more information, refer to the VPN Client Administrator Guide, Release 3.6..
Note: The VPN Client still supports the Data Encryption Standard (DES)/Message Digest 5 (MD5). However, support for DES/Secure Hash Algorithm (SHA) is no longer available. Because support for DES/SHA is no longer available, Cisco release 3.6 VPN Clients cannot connect to any central-site device group that is configured for, or proposing, DES/SHA. The VPN Client must either connect to a different group, or the administrator for the central site device must change the configuration from DES/SHA to DES/MD5, or another supported configuration.
For a list of all the supported encryption configurations, refer to the IKE Proposals section of Troubleshooting and Programmer Notes.