|
GlobalProtect App/Agent—SSL tunnels and SSL
connections to gateway and portal
|
TLSv1.0, TLSv1.1, TLSv1.2, and TLSv1.3 cipher suites RSA-SEED-SHA-1 RSA-CAMELLIA-128-SHA-1 RSA-CAMELLIA-256-SHA-1 RSA-3DES-SHA-1 RSA-AES-128-SHA-1 RSA-AES-256-SHA-1 RSA-AES-128-SHA-256 RSA-AES-256-SHA-256 RSA-AES-128-GCM-SHA-256 RSA-AES-256-GCM-SHA-384 DHE-RSA-SEED-SHA-1 DHE-RSA-AES-128-SHA-1 DHE-RSA-AES-256-SHA-1 DHE-RSA-AES-128-GCM-SHA-256 DHE-RSA-AES-256-GCM-SHA-384 EDH-RSA-3DES-SHA-1 ECDHE-RSA-AES-128-SHA-1 ECDHE-RSA-AES-256-SHA-1 ECDHE-RSA-AES-128-GCM-SHA-256 ECDHE-RSA-AES-128-GCM-SHA-384 ECDHE-ECDSA-AES-128-SHA-1 ECDHE-ECDSA-AES-256-SHA-1 ECDHE-ECDSA-AES-128-GCM-SHA-256 ECDHE-ECDSA-AES-256-GCM-SHA-384 - TLS-AES-128-GCM-SHA256
- TLS-AES-256-GCM-SHA384
- TLS-CHACHA20-POLY1305-SHA256
|
|
GlobalProtect App/Agent—IPSec mode
(Keys transported through SSL session with gateway)
|
AES-128-CBC-HMAC-SHA-1 AES-128-GCM-HMAC-SHA-1 AES-256-GCM-HMAC-SHA-1
|
|
GlobalProtect Portal—Browser Access
|
SSLv3, TLSv1.0, TLSv1.1, and TLSv1.2 cipher suites RSA-SEED-SHA-1 RSA-CAMELLIA-128-SHA-1 RSA-CAMELLIA-256-SHA-1 RSA-3DES-SHA-1 RSA-AES-128-SHA-1 RSA-AES-256-SHA-1 RSA-AES-128-SHA-256 RSA-AES-256-SHA-256 RSA-AES-128-GCM-SHA-256 RSA-AES-256-GCM-SHA-384 DHE-RSA-AES-256-SHA-1 DHE-RSA-AES-128-SHA-1 DHE-RSA-AES-128-GCM-SHA-256 DHE-RSA-AES-256-GCM-SHA-384 EDH-RSA-3DES-SHA-1 ECDHE-ECDSA-AES-128-SHA-1 ECDHE-ECDSA-AES-256-SHA-1 ECDHE-ECDSA-AES-128-GCM-SHA-256 ECDHE-ECDSA-AES-256-GCM-SHA-384
|
