topic Re: SSH Proxy supported ciphers and OpenSSH configuration in General Topics https://live.paloaltonetworks.com/t5/general-topics/ssh-proxy-supported-ciphers-and-openssh-configuration/m-p/553726#M112565 <P>Hello&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/115692">@Han.Valk</a>&nbsp;</P> <P>Depending on the PAN-OS version you're using, the supported cipher suites can differ.</P> <P>You might find the following link helpful:</P> <P><A href="https://docs.paloaltonetworks.com/compatibility-matrix/supported-cipher-suites" target="_blank">https://docs.paloaltonetworks.com/compatibility-matrix/supported-cipher-suites</A></P> <P>&nbsp;</P> Tue, 15 Aug 2023 03:42:38 GMT akuzhuppilly 2023-08-15T03:42:38Z SSH Proxy supported ciphers and OpenSSH configuration https://live.paloaltonetworks.com/t5/general-topics/ssh-proxy-supported-ciphers-and-openssh-configuration/m-p/553655#M112562 <P>Currently PAN-OS unfortunately does not support recent ciphers for decrypting SSH.</P> <P>Does anybody know of a tested configuration of the&nbsp;<SPAN>sshd_config in Ubuntu Server so that is supports:<BR /></SPAN></P> <DIV> <UL> <LI class="li"> <DIV> <DIV class="p"> <DIV>AES-128-CTR</DIV> </DIV> </DIV> </LI> <LI class="li"> <DIV> <DIV class="p"> <DIV>AES-192-CTR</DIV> </DIV> </DIV> </LI> <LI class="li"> <DIV> <DIV class="p"> <DIV>AES-256-CTR</DIV> </DIV> </DIV> </LI> </UL> </DIV> <P><LI-WRAPPER></LI-WRAPPER></P> <P><SPAN>and&nbsp;</SPAN></P> <DIV> <UL> <LI class="li"> <DIV> <DIV class="p"> <DIV>HMAC-SHA-1</DIV> </DIV> </DIV> </LI> </UL> </DIV> <P><LI-WRAPPER></LI-WRAPPER></P> Mon, 14 Aug 2023 17:05:14 GMT https://live.paloaltonetworks.com/t5/general-topics/ssh-proxy-supported-ciphers-and-openssh-configuration/m-p/553655#M112562 Han.Valk 2023-08-14T17:05:14Z Re: SSH Proxy supported ciphers and OpenSSH configuration https://live.paloaltonetworks.com/t5/general-topics/ssh-proxy-supported-ciphers-and-openssh-configuration/m-p/553726#M112565 <P>Hello&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/115692">@Han.Valk</a>&nbsp;</P> <P>Depending on the PAN-OS version you're using, the supported cipher suites can differ.</P> <P>You might find the following link helpful:</P> <P><A href="https://docs.paloaltonetworks.com/compatibility-matrix/supported-cipher-suites" target="_blank">https://docs.paloaltonetworks.com/compatibility-matrix/supported-cipher-suites</A></P> <P>&nbsp;</P> Tue, 15 Aug 2023 03:42:38 GMT https://live.paloaltonetworks.com/t5/general-topics/ssh-proxy-supported-ciphers-and-openssh-configuration/m-p/553726#M112565 akuzhuppilly 2023-08-15T03:42:38Z