PAN-OS 9.1 HA1 SSH Cipher Suites

Table of Contents

PAN-OS 9.1 Administrative Session Cipher Suites

PAN-OS 9.1 PAN-OS-to-Panorama Connection Cipher Suites

PAN-OS 9.1 HA1 SSH Cipher Suites

List of cipher suites supported for HA1 SSH connections on firewalls running PAN-OS® 9.1.

The following table lists the cipher suites for HA1 control connections using SSH that are supported on firewalls running a PAN-OS® 9.1 release in normal (non-FIPS-CC) or FIPS-CC operational mode.

If your firewall is running in FIPS-CC mode, see the list of PAN-OS 9.1 Cipher Suites Supported in FIPS-CC Mode.

Feature or Function	Ciphers Supported in PAN-OS 9.1 Releases
HA1 SSH	AES 128-bit cipher with Cipher Block Chaining AES 128-bit cipher with Counter Mode AES 128-bit cipher with GCM (Galois/Counter Mode) AES 192-bit cipher with Cipher Block Chaining AES 192-bit cipher with Counter Mode AES 256-bit cipher with Cipher Block Chaining AES 256-bit cipher with Counter Mode AES 256-bit cipher with GCM

PAN-OS 9.1 Administrative Session Cipher Suites

PAN-OS 9.1 PAN-OS-to-Panorama Connection Cipher Suites

Compatability Matrix

PAN-OS 9.1 HA1 SSH Cipher Suites

Compatability Matrix

PAN-OS 9.1 HA1 SSH Cipher Suites

Activation and Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Network Security

Endpoints

Visibility & Monitoring

FedRAMP

Best Practices

Experts Corner