topic Re: EXCHANGE KEY ECDHE insufficient size Global Protect in GlobalProtect Discussions

EXCHANGE KEY ECDHE insufficient size Global Protect

Mamoudou — Wed, 25 Jan 2023 09:14:51 GMT

Hello team,

I have an issue with the exchage key ECDHE size with Global protect.

Our Qualys scans show that we accept keys of insufficient size in ECDHE.
The problem is that on our equipment, we obviously cannot set the size of the keys.

When I checked this KB https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqSHCA0&lang=en_US%E2%80%A9 I saw there a feature request in placed to disable a specific Key exchange ECDHE key-size ( FR-19980). Do you know something about that ?

Thank you in advance.

Kind regards

Re: EXCHANGE KEY ECDHE insufficient size Global Protect

Mamoudou — Thu, 02 Feb 2023 09:34:38 GMT

Hello,

Anyone from palo alto networks can tell me something about this feature :

There is a Feature Request in placed to disable a specific Key exchange ECDHE key-size : FR-19980

Seen in the KB : https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqSHCA0&lang=en_US%E2%80%A9

Thanks for your help

Re: EXCHANGE KEY ECDHE insufficient size Global Protect

Mamoudou — Tue, 14 Feb 2023 09:11:31 GMT

Hello,

Anyone from palo alto networks can tell me something about this feature :

There is a Feature Request in placed to disable a specific Key exchange ECDHE key-size : FR-19980

Seen in the KB : https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqSHCA0&lang=en_US%E2%80%A...

Thanks for your help