Description | This article describes a situation where high encryption 3DES and AES cannot be selected in the IPsec tunnel configuration, along with potential causes for this issue. |
Scope | Applicable to FortiGate versions. |
Solution |
Check device compatibility:
It is important to ensure that the hardware or software FortiGate device supports high encryption algorithms, as some older devices may not support AES or 3DES.
Consider the following example:
get sys status
The FortiGate-400F device displays a license status of Low-Encryption (LENC), indicating that it supports only low encryption algorithms.
In such cases, it is advisable to upgrade to a full encryption device by acquiring a strong encryption upgrade license key. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.