Palo Alto - SSL ciphers that offer medium strength encryption

[preetpk]

We used Nessus tool to run security scan on the PA-5020 & PA-3020 series & it identified with the following below medium vulnerability:

"The remote host supports the use of SSL ciphers that offer medium  strength encryption"

Please let me know, for any fix to this vulnerability.

I found one solution for the same in below link. Just want to check if below solution will fix this vulnerability, also will there be any impact will making below configuration changes - as, "will Firewall SSH remote admin access will impacted"

https://live.paloaltonetworks.com/t5/general-topics/how-to-disable-ssh-weak-algorithm-supported/td-p...

[BPry]

@preetpk,

The linked topic you have listed is talking about SSH, not SSL. You'll want to take a look at the KB article below to get this fixed.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmqeCAC

[preetpk]

Thanks for the update. Will there be any impact will implementing this changes - like losing Firewall remote management access.