>
    PAN-OS 10.1 Administrative Session Cipher Suites
    Focus
    Download PDF
    Focus
    1. Home
    2. Compatibility Matrix
    3. Supported Cipher Suites
    4. Cipher Suites Supported in PAN-OS 10.1
    5. PAN-OS 10.1 Administrative Session Cipher Suites
    Download PDF
    Compatibility Matrix

    PAN-OS 10.1 Administrative Session Cipher Suites

    Table of Contents

    PAN-OS 10.1 Administrative Session Cipher Suites

    List of cipher suites supported for administrative sessions on firewalls running PAN-OS® 10.1 in normal operation mode.
    The following table lists the cipher suites for administrative sessions that are supported on firewalls running a PAN-OS® 10.1 release in normal (non-FIPS-CC) operational mode.
    If your firewall is running in FIPS-CC mode, see the list of PAN-OS 10.1 Cipher Suites Supported in FIPS-CC Mode.
    Feature or Function
    Ciphers Supported in PAN-OS 10.1 Releases
    Administrative Sessions to Web Interface
    • TLSv1.1 and TLSv1.2 cipher suites
    • RSA-SEED-SHA-1
    • RSA-CAMELLIA-128-SHA-1
    • RSA-CAMELLIA-256-SHA-1
    • RSA-3DES-SHA-1
    • RSA-AES-128-SHA-1
    • RSA-AES-256-SHA-1
    • RSA-AES-256-CBC-SHA-1
    • RSA-AES-128-CBC-SHA-256
    • RSA-AES-256-CBC-SHA-256
    • RSA-AES-128-GCM-SHA-256
    • RSA-AES-256-GCM-SHA-384
    • DHE-RSA-3DES-SHA-1
    • DHE-RSA-AES-128-GCM-SHA-256
    • DHE-RSA-AES-256-GCM-SHA-384
    • ECDHE-RSA-AES-128-GCM-SHA-256
    • ECDHE-RSA-AES-256-GCM-SHA-384
    • ECDHE-ECDSA-AES-128-SHA-1
    • ECDHE-ECDSA-AES-256-SHA-1
    • ECDHE-ECDSA-AES-128-GCM-SHA-256
    • ECDHE-ECDSA-AES-256-GCM-SHA-384
    Administrative Sessions to CLI (SSH)—Encryption
    • AES-128-CTR
    • AES-192-CTR
    • AES-256-CTR
    • AES-128-GCM
    • AES-256-GCM
    • CHACHA20-POLY1305
    Administrative Sessions to CLI (SSH)—Message Authentication
    • UMAC-64
    • UMAC-128
    • HMAC-SHA-1
    • HMAC-SHA-256
    • HMAC-SHA-512
    Administrative Sessions to CLI (SSH)—Server Host Key Types
    • RSA keys—2048-bit, 3072-bit, and 4096-bit keys
    • ECDSA keys—256-bit, 384-bit, and 521-bit keys
    Administrative Sessions to CLI (SSH)—Key Exchange Algorithms
    • curve25519-SHA-256
    • diffie-hellman-group14-SHA-1
    • diffie-hellman-group14-SHA-256
    • diffie-hellman-group16-SHA-512
    • diffie-hellman-group-exchange-SHA-256
    • ecdh-SHA-2-nistp256
    • ecdh-SHA-2-nistp384
    • ecdh-SHA-2-nistp521

    © 2024 Palo Alto Networks, Inc. All rights reserved.