Looks like this issue isn't really fixed, I've tested 6.43.4 and 6.44beta28 IKEv2 in transport mode proposals: add auth-algorithms=sha256 enc-algorithms=aes-256-cbc lifetime=1h pfs-group=modp4096 profile: dh-group=modp4096 dpd-interval=10s dpd-maximum-failures=3 enc-algorithm=aes-256 hash-algorithm=...