PAN-OS 11.0 HA1 SSH Cipher Suites

Table of Contents

PAN-OS 11.0 Administrative Session Cipher Suites

PAN-OS 11.0 PAN-OS-to-Panorama Connection Cipher Suites

PAN-OS 11.0 HA1 SSH Cipher Suites

List of cipher suites supported for HA1 SSH connections on firewalls running PAN-OS® 11.0.

The following table lists the cipher suites for HA1 control connections using SSH that are supported on firewalls running a PAN-OS® 11.0 release in normal (non-FIPS-CC) or FIPS-CC operational mode.

If your firewall is running in FIPS-CC mode, see the list of PAN-OS 11.0 Cipher Suites Supported in FIPS-CC Mode.

Feature or Function	Ciphers Supported in PAN-OS 11.0 Releases
HA1 SSH	AES 128-bit cipher with Counter Mode AES 128-bit cipher with GCM (Galois/Counter Mode) AES 192-bit cipher with Counter Mode AES 256-bit cipher with Counter Mode AES 256-bit cipher with GCM CHACHA20-POLY1305

PAN-OS 11.0 Administrative Session Cipher Suites

PAN-OS 11.0 PAN-OS-to-Panorama Connection Cipher Suites

Compatability Matrix

PAN-OS 11.0 HA1 SSH Cipher Suites

Compatability Matrix

PAN-OS 11.0 HA1 SSH Cipher Suites

Activation and Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Network Security

Endpoints

Visibility & Monitoring

FedRAMP

Best Practices

Experts Corner