running into this concern ourselves - I opened a support ticket and was advised:  for clearings PCI compliance we use modp2048 and aes128   which seems to be the same as you've mentioned from months back   resulting in:  aes128 for encryption and Diffie Hellman Group 14 with modp2048   That leads me to believe this back-end change support can make would result in a config that macOS X will not support with the built-in macOS and iOS VPN clients?     -Adam ... View more