Selecting the Connection Type for a Site

Using the correct IPsec Connection Type depends on the environment and firewall that is involved in connecting the site to the Cato Cloud. In general, IPsec IKEv2 is the more robust and we recommend that you use it whenever possible for the Connection Type. However, it is not always supported - for example Azure only supports IKEv1 for policy-based VPN gateways.

For sites that use IPsec IKEv1, the option is Cato-initiated Connection Type. This means that the Cato Cloud initiates the connection with the site and easily handles failovers to another link.

For Cisco ASA appliances, there is a known incompatibility with Cato IKEv2 sites, read more.