Symptom
DH group 24 algorithm violates PSB criteria
Conditions
ISAKMP policy, IKEv2 proposal and IPsec profile PFS should not have DH Group 24 configured.
(config)#crypto isakmp policy 1
GD(config-isakmp)#group ?
(config)#crypto ikev2 proposal 1
(config-ikev2-proposal)#group ?
config)#crypto ipsec profile p1
GD(ipsec-profile)#set pfs ?
Workaround
Disable CSDL compliance
crypto engine compliance shield disable
Further Problem Description
Applicable to all platforms
