> For the complete documentation index, see [llms.txt](https://pnpt.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/ike-agressive-mode.md).

# IKE Agressive mode

## Overview

Having aggressive mode enabled on a VPN allows for an attacker to capture and crack that PSK thus gaining access into the internal network.

The **Likelihood** of this happening are close to zero but the **Impact** is very high. It's just best practice to have aggressive mode on **IKE** be disabled

## Example

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2FGPFpZPClr0pK03Uc4JW0%2Fimage.png?alt=media&amp;token=07f1fcba-499a-4a43-96a9-697e24ba55eb" alt=""><figcaption><p>IKE aggressive mode turned on</p></figcaption></figure>

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2F8vWOQyAVeWTZKt3gMtIr%2Fimage.png?alt=media&amp;token=a8fdef90-2475-4ba6-9ddf-4492d30a6b8b" alt=""><figcaption><p>Evidence</p></figcaption></figure>

{% hint style="info" %}
Remediation would be to simply turn it off
{% endhint %}