SSL/TLS Vulnerabilities

[ChandrashekharD]

Dear Team , 

We have a customer, who found SSL/TLS Vulnerabilities on audit SSL/TLS configuration The firewall supports weak cipher mode CBC.

kindly provide the solution to remediate the weakness. 

snip attached for Refr.

[TomYoung · Accepted solution]

Hi @ChandrashekharD ,

You can disable them on the CLI.

On a NGFW:  https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmqeCAC

On Panorama:  https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kHYwCAM

If you need to do it for the Mgmt interface as well:  https://knowledgebase.paloaltonetworks.com/kcsArticleDetail?id=kA14u000000HBGL

Thanks,

Tom