Introduction
A group of researchers has found vulnerabilities in implementations of the Internet Key Exchange version 1 (IKEv1) protocol in firewalls and other networking applications that support IPsec VPN tunnels.
If exploited, the flaw can allow attackers to bypass authentication and impersonate clients or servers.
Deprecation
In order to guarantee the safety of Liferay Cloud customers, we're deprecating the IKEv1 protocol and recommending the use of IKEv2.
IKEv2 has now seen wide deployment and provides a full replacement for all IKEv1 functionality. On top of that, IKEv2 addresses various issues present in IKEv1, such as IKEv1 being vulnerable to amplification attacks.
Timeline
Customers who are using IKEv1 will have until July 16th, 2021 to upgrade.
From that point on, we will remove support for IKEv1 and only allow customers to use IKEv2 protocol when connecting with IPSec VPN.
Questions
If you have any questions, please feel free to contact Liferay Support