Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

SSL/TLS Vulnerabilities

Palo Alto Networks Approved

Palo Alto Networks Approved

Community Expert Verified

Community Expert Verified

Dear Team ,

We have a customer, who found SSL/TLS Vulnerabilities on audit SSL/TLS configuration The firewall supports weak cipher mode CBC.

kindly provide the solution to remediate the weakness.

snip attached for Refr.

80 KB

1 accepted solution

Accepted Solutions

Hi @ChandrashekharD ,

You can disable them on the CLI.

On a NGFW: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmqeCAC

On Panorama: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kHYwCAM

If you need to do it for the Mgmt interface as well: https://knowledgebase.paloaltonetworks.com/kcsArticleDetail?id=kA14u000000HBGL

Thanks,

Tom

Help the community: Like helpful comments and mark solutions.

View solution in original post

1 REPLY 1

Hi @ChandrashekharD ,

You can disable them on the CLI.

On a NGFW: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmqeCAC

On Panorama: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kHYwCAM

If you need to do it for the Mgmt interface as well: https://knowledgebase.paloaltonetworks.com/kcsArticleDetail?id=kA14u000000HBGL

Thanks,

Tom

Help the community: Like helpful comments and mark solutions.

1 accepted solution
1242 Views
1 replies
0 Likes

Like what you see?