Algorithm of the server certificate of the gateway—The
operating system of the endpoint determines what cipher suites the
GlobalProtect app includes in its Client Hello message. As long
as the GlobalProtect app includes the cipher suite that the gateway
prefers to use, the gateway will select that cipher suite for the
SSL session. The order of cipher suites within the Client Hello
message does not affect the cipher suite selection: The gateway
selects the cipher suite based on the
SSL/TLS service profile and
the algorithm of the gateway server certificate and its preferred
list. You select the service profile from the GlobalProtect gateway
authentication configuration.