https://live.paloaltonetworks.com/t5/general-topics/decrypt-error-decrypt-unsupport-param-inbound-ssl/m-p/424938#M94314 <P>Does 9.1 support DHE/ECDHE. Or is it still RSA only thing. We have a digicert certificate on the backend server, PA version 9.1.10.</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Thu, 05 Aug 2021 19:50:27 GMT raji_toor 2021-08-05T19:50:27Z https://live.paloaltonetworks.com/t5/general-topics/decrypt-error-decrypt-unsupport-param-inbound-ssl/m-p/424938#M94314 <P>Does 9.1 support DHE/ECDHE. Or is it still RSA only thing. We have a digicert certificate on the backend server, PA version 9.1.10.</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Thu, 05 Aug 2021 19:50:27 GMT https://live.paloaltonetworks.com/t5/general-topics/decrypt-error-decrypt-unsupport-param-inbound-ssl/m-p/424938#M94314 raji_toor 2021-08-05T19:50:27Z https://live.paloaltonetworks.com/t5/general-topics/decrypt-error-decrypt-unsupport-param-inbound-ssl/m-p/425153#M94330 <P>The PAN compatibility matrix has the supported cipher suites for every version of PAN-OS listed <A href="https://docs.paloaltonetworks.com/compatibility-matrix/supported-cipher-suites.html" target="_self">HERE</A>&nbsp;and assuming that you are operating without FIPS mode enabled the table you are looking for is <A href="https://docs.paloaltonetworks.com/compatibility-matrix/supported-cipher-suites/cipher-suites-supported-in-pan-os-9-1/cipher-suites-supported-in-pan-os-9-1-decryption.html#id251bda33-e507-495e-8490-30baa834fe57" target="_self">HERE</A></P> Fri, 06 Aug 2021 16:04:14 GMT https://live.paloaltonetworks.com/t5/general-topics/decrypt-error-decrypt-unsupport-param-inbound-ssl/m-p/425153#M94330 BPry 2021-08-06T16:04:14Z