This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About ctovazzi
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About ctovazzi
01-27-2023
4Posts
0Likes
0Solutions
Jan 27, 2023Last Visited
User
Activity
User
Profile
Latest posts by ctovazzi
| Subject | Views | Posted |
|---|---|---|
| 1672 | 09-18-2015 07:47 AM | |
| 1714 | 09-10-2015 01:02 AM | |
| 2581 | 04-28-2015 09:14 AM | |
| 2671 | 04-25-2015 06:11 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes |
User Badges
Community Statistics
| Member Since | 07-19-2012 01:41 AM |
| Date Last Visited | 01-27-2023 03:40 AM |
| Posts | 4 |
09-10-2015
01:02 AM
Hello, I have PAN OS 6.0.10, I need to implement SSL inbound inspection, for my web server, but I have multiple SSL certificate for same public ip address. When I try to commit configuration, the commit failed. I think PAN support only one Decryption rule for public IP. It's possible to have multiple SSL certificate for same public ip address and multiple decryption rule for same ip ? Tnx
... View more
04-28-2015
09:14 AM
Hi prb, I run pcap on the client machine. On pcap, I find this (from my client to server): HandShake protocol: Client Hello Version: TLS 1.2 Cipher Suites (21 suites): Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) Cipher Suite: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x009e) Cipher Suite: TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcc14) Cipher Suite: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcc13) Cipher Suite: TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcc15) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) Cipher Suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) Cipher Suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033) Cipher Suite: TLS_ECDHE_ECDSA_WITH_RC4_128_SHA (0xc007) Cipher Suite: TLS_ECDHE_RSA_WITH_RC4_128_SHA (0xc011) Cipher Suite: TLS_RSA_WITH_AES_128_GCM_SHA256 (0x009c) Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA (0x0035) Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f) Cipher Suite: TLS_RSA_WITH_RC4_128_SHA (0x0005) Cipher Suite: TLS_RSA_WITH_RC4_128_MD5 (0x0004) Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a) Cipher Suite: TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0x00ff) and this (from server to client after Client Hello Hadshake protocol) TLSv1.2 Record Layer: Handshake Protocol: Server Hello Cipher Suite: TLS_RSA_WITH_RC4_128_SHA (0x0005) Carlo
... View more
04-25-2015
06:11 AM
Hello, I try to configure nginx 1.6.2 (on linux ubuntu server 14.04 LTS) with fully support SSL Inbound decryption. We're running PAN-OS 6.0.9. Based on the document Inbound SSL Decryption Not Working Due to Unsupported Cipher Suites, I configure this on my nginx.conf: ssl_ciphers " AES256-SHA256: AES128-SHA256: RC4-SHA: RC4-MD5: DES-CBC3-SHA: AES256-SHA: AES128-SHA "; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; But, PAN-OS not decrypt traffic. Can you help me ? Tnx Carlo
... View more
- Tags:
- decryption
- nginx
Labels:
- Labels:
-
Configuration
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks