ASA 5500 SHA-256

[Julio_Lapaca]

Hello,

        I am searching for SHA-256 support in IPSEC VPN site to site for the Cisco ASA , what is the supported model/software as i can't see it in the available hashing algorithms in ASA 5500.

Thanks,

Julio César

[Roy Harrington]

Ikev2 on 5500 series cannot use sha256 this is a hardware limitation due to the architecture of the CPU. You can also see the limitation listed here :

 https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/vpn/asa_91_vpn_config/vpn_ike.html#pgfId-1042794

“SHA-256 can be used for integrity and PRF to establish IKEv2 tunnels, but it can also be used for ESP integrity protection on the newer ASA platforms (and not 5505, 5510, 5520, 5540, or 5550).”

[Julio_Lapaca]

thanks Roy

one more question: And with ikev1 you can not use sha256 either?

[Julio_Lapaca]

thanks Roy

one more question: And with ikev1 you can not use sha256 either?