Is it still safe to use Ikev1 VPNs?

[sherazy941]

Hi,

Are ikev1 VPNs still safe to use? Or can they be hacked easily? 

Thanks for help.

[Ajay Saini]

Even ikev2 is susceptible to being hacked, so is any other protocols. There is no foolproof protocol. Ikev1 had some limitations and thats where ikev2 was introduced. Certainly, there are recommendations to use ikev2 wherever it is possible since its an evolved version of ikev1.

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113597-ptn-113597.html

If one plans to run ikev1, it would be advisable to keep an eye on any ongoing vulnerabilties and upgrade the device as applicable. The only reason why you should be running ikev1 should be if you are using an old device which does not support ikev2.

-AJ

[Karsten Iwen]

If you implement your VPNs in a correct and way with strong crypto, it's very likely that your VPNs are the strongest element of your complete security-chain. But with IKEv2 being the better protocol in many ways, there is no downside to use it when possible.