https://community.checkpoint.com/t5/General-Topics/S2S-VPN-with-GCP-Best-Practices/m-p/224018#M37331 <P>As long as you use supported algorithms in this list:&nbsp;<A href="https://cloud.google.com/network-connectivity/docs/vpn/concepts/supported-ike-ciphers#proposal-order" target="_blank">Supported IKE ciphers &nbsp;|&nbsp; Cloud VPN &nbsp;|&nbsp; Google Cloud</A>&nbsp;I wouldn't expect to have any issues.</P> <P>We currently use IKEv2 AES-256 SHA26 Group 19 and AES-256 SHA256 with no issues to Google.</P> Mon, 19 Aug 2024 18:14:29 GMT CaseyB 2024-08-19T18:14:29Z https://community.checkpoint.com/t5/General-Topics/S2S-VPN-with-GCP-Best-Practices/m-p/224017#M37330 <P>Reviewing&nbsp;<A href="https://support.checkpoint.com/results/sk/sk123602" target="_blank">https://support.checkpoint.com/results/sk/sk123602</A>&nbsp;seems to be a bit outdated with recommendations of Diffie Hellman Group 2 (avoid) or Group 14 (bare minimum acceptable at the moment).&nbsp; &nbsp; Any better recommendations such as group 20 that work well between on-prem gateway running r81.20 and GCP using policy based VPN?&nbsp;&nbsp;</P><P>Thank you</P> Mon, 19 Aug 2024 16:57:29 GMT https://community.checkpoint.com/t5/General-Topics/S2S-VPN-with-GCP-Best-Practices/m-p/224017#M37330 George_Casper 2024-08-19T16:57:29Z https://community.checkpoint.com/t5/General-Topics/S2S-VPN-with-GCP-Best-Practices/m-p/224018#M37331 <P>As long as you use supported algorithms in this list:&nbsp;<A href="https://cloud.google.com/network-connectivity/docs/vpn/concepts/supported-ike-ciphers#proposal-order" target="_blank">Supported IKE ciphers &nbsp;|&nbsp; Cloud VPN &nbsp;|&nbsp; Google Cloud</A>&nbsp;I wouldn't expect to have any issues.</P> <P>We currently use IKEv2 AES-256 SHA26 Group 19 and AES-256 SHA256 with no issues to Google.</P> Mon, 19 Aug 2024 18:14:29 GMT https://community.checkpoint.com/t5/General-Topics/S2S-VPN-with-GCP-Best-Practices/m-p/224018#M37331 CaseyB 2024-08-19T18:14:29Z