12-15-2017 03:03 AM
We have such a problem with Microsoft Exchange OWA which we have recently published through Palo Alto.We have installed certificates with private keys,created necessary rules for PBF and NAT.
Everything is working fine except decryption.We can see in monitoring tab errors like decrypt-error or decrypt-unsupport-param
we have tried to connect from different browsers from outside with from TLS 1.0 to TLS 1.2
we also checked cypher suite which use our Exchange server and the clients' browser
also checked by packet capture
The interesting thing is that in some users there is no problem with decryption but in most users we see that problem
The version of Pan OS is 7.1.10
global protect version 4.0.4
the appliance is VM-300
