Control: ism-0999; Revision: 6; Updated: Mar-22; Applicability: ALL; Essential Eight: N/A ​

DH or ECDH is used for key establishment of IPsec connections, preferably 384-bit random ECP group, 3072-bit MODP Group or 4096-bit MODP Group.