PAN-OS 10.1 HA1 SSH Cipher Suites

List of cipher suites supported for HA1 SSH connections on firewalls running PAN-OS® 10.1.
The following table lists the cipher suites for HA1 control connections using SSH that are supported on firewalls running a PAN-OS® 10.1 release in normal (non-FIPS-CC) or FIPS-CC operational mode.
If your firewall is running in FIPS-CC mode, see the list of PAN-OS 10.1 Cipher Suites Supported in FIPS-CC Mode.
Feature or Function
Ciphers Supported in PAN-OS 10.1 Releases
HA1 SSH
  • AES 128-bit cipher with Cipher Block Chaining
  • AES 128-bit cipher with Counter Mode
  • AES 128-bit cipher with GCM (Galois/Counter Mode)
  • AES 192-bit cipher with Cipher Block Chaining
  • AES 192-bit cipher with Counter Mode
  • AES 256-bit cipher with Cipher Block Chaining
  • AES 256-bit cipher with Counter Mode
  • AES 256-bit cipher with GCM

Recommended For You