Default IPSEC poliy for policy based VPN Gateway in Azure

Shola Lawani 531 Reputation points Microsoft Employee
2020-09-16T12:40:30.6+00:00

Hello Experts,

I wanted to clarify some parameters for the default IPSEC policy for a policy-based VPN gateway based on the link here ,https://video2.skills-academy.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices#ipsec

Which of the encryption Algorithms is used by default when creating a Policy based VPN gateway.

Encryption & Hashing Algorithms

  1. AES256, SHA256
  2. AES256, SHA1
  3. AES128, SHA1
  4. 3DES, SHA1

Also can a custom policy be attached to a basic sku vpn gateway.

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,435 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,264 questions
0 comments
Accepted answer
  1. GitaraniSharma-MSFT 49,171 Reputation points Microsoft Employee
    2020-09-16T15:38:37.423+00:00

    Hello anonymous user ,

    All of the below Encryption & Hashing Algorithms are available by default (as individual sets) when creating a Policy based VPN gateway in Azure:

    1. AES256, SHA256
    2. AES256, SHA1
    3. AES128, SHA1
    4. 3DES, SHA1

    These algorithms are present in form of proposals and are matched against your on-prem configuration.

    You need to make sure that one of the above 4 sets is configured in your on-prem VPN device. So that when a connection is initiated, Azure will start matching it's default sets against your configured algorithm set and once it's matched, it will accept that particular proposal for VPN connection.

    Custom IPsec/IKE policy is not supported for the Basic SKU VPN gateway but is supported in all other SKUs.
    Please refer : https://video2.skills-academy.com/en-us/azure/vpn-gateway/vpn-gateway-about-compliance-crypto#is-custom-ipsecike-policy-supported-on-all-azure-vpn-gateway-skus

    Kindly let us know if the above helps or you need further assistance on this issue.

    ----------------------------------------------------------------------------------------------------------------

    Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest