IKEv1 IPSec VPN Deprecation


A group of researchers has found vulnerabilities in implementations of the Internet Key Exchange version 1 (IKEv1) protocol in firewalls and other networking applications that support IPsec VPN tunnels.

If exploited, the flaw can allow attackers to bypass authentication and impersonate clients or servers.


In order to guarantee the safety of Liferay Cloud customers, we're deprecating the IKEv1 protocol and recommending the use of IKEv2.

IKEv2 has now seen wide deployment and provides a full replacement for all IKEv1 functionality. On top of that, IKEv2 addresses various issues present in IKEv1, such as IKEv1 being vulnerable to amplification attacks.


Customers who are using IKEv1 will have until July 16th, 2021 to upgrade.

From that point on, we will remove support for IKEv1 and only allow customers to use IKEv2 protocol when connecting with IPSec VPN.


If you have any questions, please feel free to contact Liferay Support

Was this article helpful?
0 out of 1 found this helpful