I guess replacing the ER7206 with ER707-M2 would overcome that "limitation" - right?

@KimcheeGUN @Hank21 The release notes says this: DPI: Added support for Deep Packet Inspection in Site view > Settings > Network Security > Application Control, which helps you to manage your network...

Would be really nice with al those upcoming changes on both sites of the fence... :-)

@shberge Many thanks for the quick and to the point answers. And indeed - works as you mentioned. To give the R605 some breathing room I now use "SHA1 - AES128 - DH2" on all sites; including the PFS...

@shberge I don't understand what you are saying about buggy R7206-firmware and not supported with the R605... To make sure we are on the same page (see also my initial post): The settings in my...

@shberge Thank you for the quick response. See attached screenshot with all relevant settings. Will give your settings a try later this weekend. Cheers - Will =====