EXCHANGE KEY ECDHE insufficient size Global Protect

[Mamoudou]

Hello team, 

I have an issue with the exchage key ECDHE size with Global protect.

Our Qualys scans show that we accept keys of insufficient size in ECDHE.
The problem is that on our equipment, we obviously cannot set the size of the keys.

When I checked this KB https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqSHCA0&lang=en_US%E2%80%A... I saw there a feature request in placed to disable a specific Key exchange ECDHE key-size ( FR-19980). Do you know something about that ?

Thank you in advance.

Kind regards

[Mamoudou]

Hello,

Anyone from palo alto networks can tell me something about this feature : 

There is a Feature Request in placed to disable a specific Key exchange ECDHE key-size : FR-19980 

Seen in the KB : https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqSHCA0&lang=en_US%E2%80%A...

Thanks for your help

[Mamoudou]

Hello,

Anyone from palo alto networks can tell me something about this feature : 

There is a Feature Request in placed to disable a specific Key exchange ECDHE key-size : FR-19980 

Seen in the KB : https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqSHCA0&lang=en_US%E2%80%A...

Thanks for your help