SSH Proxy supported ciphers and OpenSSH configuration

[Han.Valk]

Currently PAN-OS unfortunately does not support recent ciphers for decrypting SSH.

Does anybody know of a tested configuration of the sshd_config in Ubuntu Server so that is supports:

• AES-128-CTR
• AES-192-CTR
• AES-256-CTR

and 

• HMAC-SHA-1

[akuzhuppilly]

Hello @Han.Valk 

Depending on the PAN-OS version you're using, the supported cipher suites can differ.

You might find the following link helpful:

https://docs.paloaltonetworks.com/compatibility-matrix/supported-cipher-suites