Algorithm of the server certificate of the gateway
—The
operating system of the endpoint determines what cipher suites the
GlobalProtect agent includes in its Client Hello message. As long
as the GlobalProtect agent includes the cipher suite that gateway
prefers to use, the gateway will select that cipher suite for the
SSL session. The order of cipher suites within the Client Hello
message does not affect the cipher suite selection: The gateway
selects the cipher suite based on the
SSL/TLS service profile and
the algorithm of the gateway server certificate and its preferred
list. You select the service profile from the GlobalProtect gateway
authentication configuration.