Nowksy Lv1Posted 2023-Jun-12 10:30
  
I suggest you sir to discuss with the peer administrator if they can lower their minimum required DH group to match the maximum supported by your Sangfor NGAF (DH group 18)
Cecillia F Lv1Posted 2023-Jun-12 10:38
  
Sangfor support team can provide you with information on the roadmap and availability of DH Group 21
osamsonkina Lv1Posted 2023-Jun-12 10:41
  
one possible adjustment on the client side is to lower the DH group setting to match the maximum supported by Sangfor NGAF DH group 18 in order to establish the IPSec connection
xefafel388 Lv1Posted 2023-Jun-12 10:47
  
there are some vpn solution out there that can support dh group 21, you may check it
Gafofa Gifbal Lv1Posted 2023-Jun-12 10:50
  
do you already check with the client side if they have different encryption algorithm?
Farina Ahmed Lv5Posted 2023-Jun-12 13:47
  
DH 21 not supported on current FW but as you mentioned in comments that you have configured ipsec on your client but peer have minimum DH 19 so you cannot upgrade your peer to DH 21 and if you will do it forcefully then it will create many bugs in the environment. So better to wait for the latest version and use only upgraded FW.
Taha Lv2Posted 2023-Jun-12 18:53
  
sangfor only support only DH 18 now
sumran Lv2Posted 2023-Jun-12 18:56
  
currenlty sangfor does not support more than 18 DH groups
jetjetd Lv5Posted 2023-Jun-12 23:07
  
DH 18 is the maximum supported for now.
Muhammad Imran Lv2Posted 2023-Jun-13 14:16
  
DH  has18 now

I Can Help:

Change

Moderator on This Board

11
8
5

Started Topics

Followers

Follow

1
3
5

Started Topics

Followers

Follow

0
4
5

Started Topics

Followers

Follow

67
20
3

Started Topics

Followers

Follow

3
14
3

Started Topics

Followers

Follow

1
138
3

Started Topics

Followers

Follow

Board Leaders