| Message Code | PIX-3-713047 |
| Severity | Error |
| Description | Unsupported Oakley group: Group Diffie-Hellman group |
| Explanation | This message indicates that the Cisco ASA does not support the Diffie-Hellman group proposed by the remote peer. The Diffie-Hellman group is used during Phase 1 to generate the Diffie-hellman keys, and during Phase 2 to generate the Diffie-Hellman keys for Perfect Forward Secrecy (PFS). |
| User Action | Check the configuration of the Diffie-Hellman keys on the peer. Also check for correct proposals on the Cisco ASA . |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.