topic Re: How does PAN OS 8.0.14 supports TLS1.3? in General Topics

How does PAN OS 8.0.14 supports TLS1.3?

MP18 — Fri, 04 Jan 2019 15:10:20 GMT

I am told to upgrade PA to 8.0.14 if we are using the ssl decryption.

Curious to know what feature is inside the PAN OS 8.0.14 that supports TLS1.3?

Re: How does PAN OS 8.0.14 supports TLS1.3?

Remo — Fri, 04 Jan 2019 18:36:35 GMT

PaloAlto does not really support TLS1.3, with PAN-OS 8.0.14 a bug was solved that prevented the downgrade of TLS1.3 connections to TLS1.2 with which the firewall is able to decrypt the connection.

Regards,

Remo

Re: How does PAN OS 8.0.14 supports TLS1.3?

MP18 — Fri, 04 Jan 2019 19:50:16 GMT

Many Thanks Remo for giving me so valuable information.

Re: How does PAN OS 8.0.14 supports TLS1.3?

MP18 — Fri, 04 Jan 2019 20:47:37 GMT

so one last thing in this case client and server still see traffic as TLS1.3 right?

Re: How does PAN OS 8.0.14 supports TLS1.3?

Remo — Fri, 04 Jan 2019 20:52:34 GMT

When the traffic is decrypted by the firewall, then both - client and server - see the connection as TLS1.2.

Re: How does PAN OS 8.0.14 supports TLS1.3?

MP18 — Fri, 04 Jan 2019 20:54:25 GMT

Many Thanks Again.

It feels great to learn from you.