We have a couple VPN routers that are failing a Qualys scan b/c of the existence of the default ISAKMP policy. "show crypto isakmp policy" shows this as the "default protection suite". I'm looking for a way to disable this policy or, better yet, remove it.
Thanks for the reply! We do have a policy explicitly configured so the default should be inactive then. Do you know if Cisco has this published somewhere (that the default will be disabled if another policy is explicitly configured)? That would help me tremendously with the auditors.
As of today, there is no way to disable the default isakmp policy. But, I am hoping to see this change in future releases.
Regards,
Arul
*Pls rate all helpful posts*
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
