GlobalProtect App/Agent—SSL tunnels
and SSL connections to gateway and portal | TLSv1.0, TLSv1.1, and TLSv1.2 cipher
suites RSA-SEED-SHA-1 RSA-CAMELLIA-128-SHA-1 RSA-CAMELLIA-256-SHA-1 RSA-3DES-SHA-1 RSA-AES-128-SHA-1 RSA-AES-256-SHA-1 RSA-AES-128-SHA-256 RSA-AES-256-SHA-256 RSA-AES-128-GCM-SHA-256 RSA-AES-256-GCM-SHA-384 DHE-RSA-SEED-SHA-1 DHE-RSA-AES-128-SHA-1 DHE-RSA-AES-256-SHA-1 DHE-RSA-AES-128-GCM-SHA-256 DHE-RSA-AES-256-GCM-SHA-384 EDH-RSA-3DES-SHA-1 ECDHE-RSA-AES-128-SHA-1 ECDHE-RSA-AES-256-SHA-1 ECDHE-RSA-AES-128-GCM-SHA-256 ECDHE-RSA-AES-128-GCM-SHA-384 ECDHE-ECDSA-AES-128-SHA-1 ECDHE-ECDSA-AES-256-SHA-1 ECDHE-ECDSA-AES-128-GCM-SHA-256 ECDHE-ECDSA-AES-256-GCM-SHA-384
|
GlobalProtect App/Agent—IPSec mode (Keys
transported through SSL session with gateway) | AES-128-CBC-HMAC-SHA-1 AES-128-GCM-HMAC-SHA-1 AES-256-GCM-HMAC-SHA-1
|
GlobalProtect Portal—Browser Access | SSLv3, TLSv1.0, TLSv1.1, and TLSv1.2
cipher suites RSA-SEED-SHA-1 RSA-CAMELLIA-128-SHA-1 RSA-CAMELLIA-256-SHA-1 RSA-3DES-SHA-1 RSA-AES-128-SHA-1 RSA-AES-256-SHA-1 RSA-AES-128-SHA-256 RSA-AES-256-SHA-256 RSA-AES-128-GCM-SHA-256 RSA-AES-256-GCM-SHA-384 DHE-RSA-AES-256-SHA-1 DHE-RSA-AES-128-SHA-1 DHE-RSA-AES-128-GCM-SHA-256 DHE-RSA-AES-256-GCM-SHA-384 EDH-RSA-3DES-SHA-1 ECDHE-ECDSA-AES-128-SHA-1 ECDHE-ECDSA-AES-256-SHA-1 ECDHE-ECDSA-AES-128-GCM-SHA-256 ECDHE-ECDSA-AES-256-GCM-SHA-384
|