This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

About ctovazzi

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
ctovazzi
‎03-28-2024
since ‎07-19-2012
L1 Bithead
User Activity
User Profile
Latest posts by ctovazzi
View All
User Badges
Community Statistics
Member Since ‎07-19-2012 01:41 AM
Date Last Visited ‎03-28-2024 12:27 PM
Posts 4

Re: SSL inbound inspection question

by in General Topics
‎09-18-2015 07:47 AM
‎09-18-2015 07:47 AM
Hello Tom, I try, but commit failed 😞 Carlo ... View more

SSL inbound inspection question

by in General Topics
‎09-10-2015 01:02 AM
‎09-10-2015 01:02 AM
Hello, I have PAN OS 6.0.10, I need to implement SSL inbound inspection, for my web server, but I have multiple SSL certificate for same public ip address. When I try to commit configuration, the commit failed. I think PAN support only one Decryption rule for public IP.   It's possible to have multiple SSL certificate for same public ip address and multiple decryption rule for same ip ?   Tnx ... View more

Re: SSL Inbound decryption and nginx webserver

by in General Topics
‎04-28-2015 09:14 AM
‎04-28-2015 09:14 AM
Hi prb, I run pcap on the client machine. On pcap, I find this (from my client to server): HandShake protocol: Client Hello Version: TLS 1.2 Cipher Suites (21 suites): Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) Cipher Suite: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x009e) Cipher Suite: TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcc14) Cipher Suite: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcc13) Cipher Suite: TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcc15) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) Cipher Suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) Cipher Suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033) Cipher Suite: TLS_ECDHE_ECDSA_WITH_RC4_128_SHA (0xc007) Cipher Suite: TLS_ECDHE_RSA_WITH_RC4_128_SHA (0xc011) Cipher Suite: TLS_RSA_WITH_AES_128_GCM_SHA256 (0x009c) Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA (0x0035) Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f) Cipher Suite: TLS_RSA_WITH_RC4_128_SHA (0x0005) Cipher Suite: TLS_RSA_WITH_RC4_128_MD5 (0x0004) Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a) Cipher Suite: TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0x00ff) and this (from server to client after Client Hello Hadshake protocol) TLSv1.2 Record Layer: Handshake Protocol: Server Hello Cipher Suite: TLS_RSA_WITH_RC4_128_SHA (0x0005) Carlo ... View more

SSL Inbound decryption and nginx webserver

by in General Topics
‎04-25-2015 06:11 AM
‎04-25-2015 06:11 AM
Hello, I try to configure nginx 1.6.2 (on linux ubuntu server 14.04 LTS) with fully support SSL Inbound decryption. We're running PAN-OS 6.0.9. Based on the document Inbound SSL Decryption Not Working Due to Unsupported Cipher Suites, I configure this on my nginx.conf: ssl_ciphers " AES256-SHA256:AES128-SHA256: RC4-SHA: RC4-MD5: DES-CBC3-SHA: AES256-SHA: AES128-SHA "; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; But, PAN-OS not decrypt traffic. Can you help me ? Tnx Carlo ... View more
Labels:
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎03-28-2024 12:27 PM
Latest Tags
No tags yet
Likes Given To
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks