Nowksy Lv1Posted 12 Jun 2023 10:30
  
I suggest you sir to discuss with the peer administrator if they can lower their minimum required DH group to match the maximum supported by your Sangfor NGAF (DH group 18)
Cecillia F Lv1Posted 12 Jun 2023 10:38
  
Sangfor support team can provide you with information on the roadmap and availability of DH Group 21
osamsonkina Lv1Posted 12 Jun 2023 10:41
  
one possible adjustment on the client side is to lower the DH group setting to match the maximum supported by Sangfor NGAF DH group 18 in order to establish the IPSec connection
xefafel388 Lv1Posted 12 Jun 2023 10:47
  
there are some vpn solution out there that can support dh group 21, you may check it
Gafofa Gifbal Lv1Posted 12 Jun 2023 10:50
  
do you already check with the client side if they have different encryption algorithm?
Farina Ahmed Posted 12 Jun 2023 13:47
  
DH 21 not supported on current FW but as you mentioned in comments that you have configured ipsec on your client but peer have minimum DH 19 so you cannot upgrade your peer to DH 21 and if you will do it forcefully then it will create many bugs in the environment. So better to wait for the latest version and use only upgraded FW.
Taha Lv2Posted 12 Jun 2023 18:53
  
sangfor only support only DH 18 now
sumran Lv2Posted 12 Jun 2023 18:56
  
currenlty sangfor does not support more than 18 DH groups
jetjetd Lv5Posted 12 Jun 2023 23:07
  
DH 18 is the maximum supported for now.
Muhammad Imran Lv2Posted 13 Jun 2023 14:16
  
DH  has18 now

I Can Help:

Change

Moderator on This Board

0
2
4

Started Topics

Followers

Follow

67
14
3

Started Topics

Followers

Follow

3
0
2

Started Topics

Followers

Follow

1
131
3

Started Topics

Followers

Follow

Board Leaders