decrypt-error/decrypt-unsupport-param inbound ssl

[raji_toor]

Does 9.1 support DHE/ECDHE. Or is it still RSA only thing. We have a digicert certificate on the backend server, PA version 9.1.10.

[BPry · Accepted solution]

The PAN compatibility matrix has the supported cipher suites for every version of PAN-OS listed HERE and assuming that you are operating without FIPS mode enabled the table you are looking for is HERE