OPERATIONAL DEFECT DATABASE
...
...
DH group 24 algorithm violates PSB criteria
ISAKMP policy, IKEv2 proposal and IPsec profile PFS should not have DH Group 24 configured. (config)#crypto isakmp policy 1 GD(config-isakmp)#group ? (config)#crypto ikev2 proposal 1 (config-ikev2-proposal)#group ? config)#crypto ipsec profile p1 GD(ipsec-profile)#set pfs ?
Disable CSDL compliance crypto engine compliance shield disable
Applicable to all platforms
Click on a version to see all relevant bugs
Cisco Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
