About jvarghese

Starting from PAN-OS 8.0 we have introduced the capability to select Ciphers for admin SSH connections. Run the following commands to disable weak Cipher Suits:   >configure #delete deviceconfig system ssh #set deviceconfig system ssh ciphers mgmt aes128-cbc #set deviceconfig system ssh ciphers mgmt aes192-cbc #set deviceconfig system ssh ciphers mgmt aes256-cbc #set deviceconfig system ssh ciphers mgmt aes128-ctr #set deviceconfig system ssh ciphers mgmt aes192-ctr #set deviceconfig system ssh ciphers mgmt aes256-ctr #set deviceconfig system ssh ciphers mgmt aes128-gcm #set deviceconfig system ssh ciphers mgmt aes256-gcm # set deviceconfig system ssh regenerate-hostkeys mgmt key-type RSA key-length 2048 # set deviceconfig system ssh session-rekey mgmt interval 3600 # commit Exit from config mode by typing 'exit' > set ssh service-restart mgmt ... View more