09-05-2023 02:01 AM
Hi, Has anyone running the client version of GP successfully mittigated the Diffie-Hellman Ephemeral Key Exchange DoS Vulnerability (SSL/TLS, D(HE)ater) for the GP portals? I have only found ways to disable DHE for clientless GP configuration.
We are running PANOS 10.1.10 h1 but it seems like DHE is supported on all PANOS version even though it is not recommended to use them.
09-06-2023 04:29 AM
Hi @Per_Edner ,
I believe the following KB explains how to disable DHE key algorithm:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004MCcCAM
Kind regards,
-Kim.
09-06-2023 04:29 AM
Hi @Per_Edner ,
I believe the following KB explains how to disable DHE key algorithm:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004MCcCAM
Kind regards,
-Kim.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
