Which authentication, encryption, and integrity combination is used for IPsec tunnels in Cisco SD-WAN?

Cisco SD-WAN uses strong cryptographic standards for IPsec tunnels to ensure secure communication. The correct combination specifies a 2048-bit key for authentication, which provides a robust level of security for key exchange. AES-256 is the standard encryption cipher, offering a high level of confidentiality. ESP (Encapsulating Security Payload) is the IPsec protocol used for both encryption and integrity, and HMAC-SHA1 is the specific hashing algorithm for integrity checking, ensuring data has not been tampered with. Options with 1024-bit keys or AES-128 are less secure than the default or recommended settings. While HMAC-MD5 can be used, HMAC-SHA1 is generally preferred for its stronger collision resistance.