topic Re: Palo Alto - SSL ciphers that offer medium strength encryption in General Topics

Palo Alto - SSL ciphers that offer medium strength encryption

preetpk — Mon, 13 Jul 2020 07:16:57 GMT

We used Nessus tool to run security scan on the PA-5020 & PA-3020 series & it identified with the following below medium vulnerability:

"The remote host supports the use of SSL ciphers that offer medium strength encryption"

Please let me know, for any fix to this vulnerability.

I found one solution for the same in below link. Just want to check if below solution will fix this vulnerability, also will there be any impact will making below configuration changes - as, "will Firewall SSH remote admin access will impacted"

https://live.paloaltonetworks.com/t5/general-topics/how-to-disable-ssh-weak-algorithm-supported/td-p/204407

Re: Palo Alto - SSL ciphers that offer medium strength encryption

BPry — Tue, 14 Jul 2020 03:23:59 GMT

@preetpk,

The linked topic you have listed is talking about SSH, not SSL. You'll want to take a look at the KB article below to get this fixed.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmqeCAC

Re: Palo Alto - SSL ciphers that offer medium strength encryption

preetpk — Wed, 15 Jul 2020 09:39:00 GMT

Thanks for the update. Will there be any impact will implementing this changes - like losing Firewall remote management access.