topic Re: How do you see what cipher suites are enabled for Global Protect? in General Topics

How do you see what cipher suites are enabled for Global Protect?

MichaelMedwid — Mon, 13 Feb 2023 22:57:02 GMT

How can I view which cipher suites are currently enabled for Global Protect SSL connectivity? I see in the document below which are supported but now how to view which are enabled/ready for negotiation nor how to disable/enable specific ones.

https://docs.paloaltonetworks.com/compatibility-matrix/supported-cipher-suites/cipher-suites-supported-in-pan-os-10-1/cipher-suites-supported-in-pan-os-10-1-globalprotect#id201f87ea-b0af-49b3-99fc-23a2df846a6e

Re: How do you see what cipher suites are enabled for Global Protect?

TomYoung — Tue, 14 Feb 2023 00:15:12 GMT

Hi @MichaelMedwid ,

Great question. This is only visible in the CLI. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmqeCAC

The "show" command will be blank because all options are enabled by default. Once you disable a few, you will see them in the configuration.

Thanks,

Tom

Re: How do you see what cipher suites are enabled for Global Protect?

MichaelMedwid — Tue, 14 Feb 2023 00:42:25 GMT

Thank you Tom!