PAN-OS 10.2 Administrative Session Cipher Suites

Table of Contents

PAN-OS 10.2 Administrative Session Cipher Suites

List of cipher suites supported for administrative sessions on firewalls running PAN-OS® 10.2 in normal operation mode.

The following table lists the cipher suites for administrative sessions that are supported on firewalls running a PAN-OS® 10.2 release in normal (non-FIPS-CC) operational mode.

If your firewall is running in FIPS-CC mode, see the list of PAN-OS 10.2 Cipher Suites Supported in FIPS-CC Mode.

Administrative Sessions to Web Interface
Administrative Sessions to CLI (SSH)—Encryption
Administrative Sessions to CLI (SSH)—Message Authentication
Administrative Sessions to CLI (SSH)—Server Host Key Types
Administrative Sessions to CLI (SSH)—Key Exchange Algorithms

Feature or Function	Ciphers Supported in PAN-OS 10.2 Releases
Administrative Sessions to Web Interface	TLSv1.1 and TLSv1.2 cipher suites RSA-SEED-SHA1 RSA-CAMELLIA-128-SHA1 RSA-CAMELLIA-256-SHA1 RSA-AES-128-SHA1 RSA-AES-256-SHA1 RSA-AES-256-CBC-SHA1 RSA-AES-128-CBC-SHA-256 RSA-AES-256-CBC-SHA-256 RSA-AES-128-GCM-SHA-256 RSA-AES-256-GCM-SHA-384 DHE-RSA-AES-128-GCM-SHA-256 DHE-RSA-AES-256-GCM-SHA-384 ECDHE-RSA-AES-128-GCM-SHA-256 ECDHE-RSA-AES-256-GCM-SHA-384 ECDHE-ECDSA-AES-128-SHA1 ECDHE-ECDSA-AES-256-SHA1 ECDHE-ECDSA-AES-128-GCM-SHA-256 ECDHE-ECDSA-AES-256-GCM-SHA-384
Administrative Sessions to CLI (SSH)—Encryption	AES-128-CTR AES-192-CTR AES-256-CTR AES-128-GCM AES-256-GCM CHACHA20-POLY1305
Administrative Sessions to CLI (SSH)—Message Authentication	UMAC-64 UMAC-128 HMAC-SHA1 HMAC-SHA2-256 HMAC-SHA2-512
Administrative Sessions to CLI (SSH)—Server Host Key Types	RSA keys—2048-bit, 3072-bit, and 4096-bit keys ECDSA keys—256-bit, 384-bit, and 521-bit keys
Administrative Sessions to CLI (SSH)—Key Exchange Algorithms	curve25519-sha256 diffie-hellman-group14-sha1 diffie-hellman-group14-sha256 diffie-hellman-group16-sha512 diffie-hellman-group-exchange-sha256 ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521

PAN-OS 10.2 Decryption Cipher Suites

PAN-OS 10.2 HA1 SSH Cipher Suites

Compatability Matrix

PAN-OS 10.2 Administrative Session Cipher Suites

Compatability Matrix

PAN-OS 10.2 Administrative Session Cipher Suites

Activation and Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Network Security

Endpoints

Visibility & Monitoring

FedRAMP

Best Practices

Experts Corner