# Cloudflare adds beta downgrade protection to IPsec services

_Published Tuesday, September 29, 2026 at 2:15 PM EDT · Security, Infrastructure · Latest · Tier 2 — Notable_

![Cloudflare adds beta downgrade protection to IPsec services — Primary](https://blog.cloudflare.com/_emdash/api/media/file/01M3PBY5F5A67Q40WQVKNKTGGN.01M3PBY7BJKSMMJ2KCY3GCVGMB.png)

Cloudflare says customers can request beta protection against cryptographic downgrade attacks for IPsec connections in Cloudflare WAN and Magic Transit. The change implements an extension developed with the IETF that helps endpoints detect an attacker trying to force a connection away from post-quantum key exchange during setup.

IPsec encrypts network traffic, and both ends of a connection must support the extension for the protection to work. Customers must ask an account manager to enable it. Cloudflare says the quantum attack addressed by the change would require computation during the connection handshake.

## Sources

- [The Cloudflare Blog](https://blog.cloudflare.com/ipsec-downgrade-protection/)

---
Canonical: https://techandbusiness.org/newswire/Ll1bxgqtQCVoAJqlwahDc6
Published: 2026-09-29T18:15:20.270Z
Story chronology: 2026-09-29T13:00:00.000Z
Retrieved: 2026-09-29T19:39:52.688Z
Publisher: Tech & Business (techandbusiness.org)