>
    Strata Copilot
    TLS Cipher Suites Supported by GlobalProtect Apps
    Focus
    Download PDF
    Focus
    1. Home
    2. GlobalProtect
    3. GlobalProtect Administrator's Guide
    4. GlobalProtect Cryptography
    5. TLS Cipher Suites Supported by GlobalProtect Apps
    Download PDF
    GlobalProtect

    TLS Cipher Suites Supported by GlobalProtect Apps

    Table of Contents

    TLS Cipher Suites Supported by GlobalProtect Apps

    Where Can I Use This?What Do I Need?
    • NGFW managed by Panorama
    • GlobalProtect Gateway license or Prisma Access license with the Mobile User subscription
    The following sections provide examples of TLS ciphers supported on GlobalProtect apps installed on various endpoint operating systems. The lists are not exhaustive for all supported operating systems.
    Renegotiations (secure or insecure) are not supported.

    TLS Ciphers Supported by GlobalProtect Apps on macOS Endpoints

    TLS Ciphers Supported by GlobalProtect Apps on macOS Endpoints
    TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0x00ff)
    TLS_ECDHE_ECDSA_WITH_AES_256_CBC_ SHA384 (0xc024)
    TLS_ECDHE_ECDSA_WITH_AES_128_CBC_ SHA256 (0xc023)
    TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a)
    TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009)
    TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA (0xc008)
    TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
    TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027)
    TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)
    TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
    TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (0xc012)
    TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 (0xc026)
    TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 (0xc025)
    TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA (0xc005)
    TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA (0xc004)
    TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA (0xc003)
    TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 (0xc02a)
    TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 (0xc029)
    TLS_ECDH_RSA_WITH_AES_256_CBC_SHA (0xc00f)
    TLS_ECDH_RSA_WITH_AES_128_CBC_SHA (0xc00e)
    TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA (0xc00d)
    TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x006b)
    TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (0x0067)
    TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039)
    TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033)
    TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (0x0016)
    TLS_RSA_WITH_AES_256_CBC_SHA256 (0x003d)
    TLS_RSA_WITH_AES_128_CBC_SHA256 (0x003c)
    TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)
    TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)
    TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)
    TLS_ECDHE_ECDSA_WITH_RC4_128_SHA (0xc007)
    TLS_ECDHE_RSA_WITH_RC4_128_SHA (0xc011)
    TLS_ECDH_ECDSA_WITH_RC4_128_SHA (0xc002)
    TLS_ECDH_RSA_WITH_RC4_128_SHA (0xc00c)
    TLS_RSA_WITH_RC4_128_SHA (0x0005)
    TLS_RSA_WITH_RC4_128_MD5 (0x0004)
    TLS Ciphers Added to Support TLSv 1.3 for GlobalProtect Apps on macOS Endpoints
    TLS_AES_128_GCM_SHA256
    TLS_AES_256_GCM_SHA384
    TLS_CHACHA20_POLY1305_SHA256

    TLS Ciphers Supported by GlobalProtect Agents on Windows Endpoints

    TLS Ciphers Supported by GlobalProtect Apps on Windows 10 Endpoints
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
    TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)
    TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a)
    TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009)
    TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
    TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xc02c)
    TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b)
    TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xc023)
    TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (0xc024)
    TLS_RSA_WITH_AES_256_GCM_SHA384 (0x009d)
    TLS_RSA_WITH_AES_128_GCM_SHA256 (0x009c)
    TLS_RSA_WITH_AES_256_CBC_SHA256 (0x003d)
    TLS_RSA_WITH_AES_128_CBC_SHA256 (0x003c)
    TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x009f)
    TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x009e)
    TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)
    TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
    TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)
    TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)
    TLS Ciphers Added to Support TLSv 1.3 for GlobalProtect Apps on Windows 11 Endpoints
    TLS_AES_128_GCM_SHA256
    TLS_AES_256_GCM_SHA384
    TLS_CHACHA20_POLY1305_SHA256

    TLS Ciphers Supported by GlobalProtect Apps on Android 6.0.1 Endpoints

    TLS Ciphers Supported by GlobalProtect Apps on Android 6.0.1 Endpoints
    TLS_ECDHE_ECDSA_WITH_AES_128_GCM_ SHA256 (0xc02b)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_ SHA384 (0xc02c)
    TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
    TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x009e)
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x009f)
    TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009)
    TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a)
    TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
    TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)
    TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033)
    TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039)
    TLS_ECDHE_ECDSA_WITH_RC4_128_SHA (0xc007)
    TLS_ECDHE_RSA_WITH_RC4_128_SHA (0xc011)
    TLS_RSA_WITH_AES_128_GCM_SHA256 (0x009c)
    TLS_RSA_WITH_AES_256_GCM_SHA384 (0x009d)
    TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)
    TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)
    TLS_RSA_WITH_RC4_128_SHA (0x0005)
    TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0x00ff)

    TLS Ciphers Supported by GlobalProtect Apps on iOS 10.2.1 Endpoints

    TLS Ciphers Supported by GlobalProtect Apps on iOS 10.2.1 Endpoints
    TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0x00ff)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_ SHA384 (0xc02c)
    TLS_ECDHE_ECDSA_WITH_AES_128_GCM_ SHA256 (0xc02b)
    TLS_ECDHE_ECDSA_WITH_AES_256_CBC_ SHA384 (0xc024)
    TLS_ECDHE_ECDSA_WITH_AES_128_CBC_ SHA256 (0xc023)
    TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a)
    TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009)
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
    TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)
    TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
    TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027)
    TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)
    TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
    TLS_RSA_WITH_AES_256_GCM_SHA384 (0x009d)
    TLS_RSA_WITH_AES_128_GCM_SHA256 (0x009c)
    TLS_RSA_WITH_AES_256_CBC_SHA256 (0x003d)
    TLS_RSA_WITH_AES_128_CBC_SHA256 (0x003c)
    TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)
    TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)

    TLS Ciphers Supported by GlobalProtect Apps on Chromebooks

    TLS Ciphers Supported by GlobalProtect Apps on Chromebooks (Chrome OS 55.0.2883)
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_ SHA384 (0xc02c)
    TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
    TLS_ECDHE_ECDSA_WITH_AES_256_CBC_ SHA384 (0xc024)
    TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)
    TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a)
    TLS_DH_DSS_WITH_AES_256_GCM_SHA384 (0x00a5)
    TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 (0x00a3)
    TLS_DH_RSA_WITH_AES_256_GCM_SHA384 (0x00a1)
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x009f)
    TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x006b)
    TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 (0x006a)
    TLS_DH_RSA_WITH_AES_256_CBC_SHA256 (0x0069)
    TLS_DH_DSS_WITH_AES_256_CBC_SHA256 (0x0068)
    TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039)
    TLS_DHE_DSS_WITH_AES_256_CBC_SHA (0x0038)
    TLS_DH_RSA_WITH_AES_256_CBC_SHA (0x0037)
    TLS_DH_DSS_WITH_AES_256_CBC_SHA (0x0036)
    TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (0x0088)
    TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA (0x0087)
    TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA (0x0086)
    TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA (0x0085)
    TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 (0xc032)
    TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 (0xc02e)
    TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 (0xc02a)
    TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 (0xc026)
    TLS_ECDH_RSA_WITH_AES_256_CBC_SHA (0xc00f)
    TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA (0xc005)
    TLS_RSA_WITH_AES_256_GCM_SHA384 (0x009d)
    TLS_RSA_WITH_AES_256_CBC_SHA256 (0x003d)
    TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)
    TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (0x0084)
    TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)
    TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b)
    TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027)
    TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xc023)
    TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
    TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009)
    TLS_DH_DSS_WITH_AES_128_GCM_SHA256 (0x00a4)
    TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 (0x00a2)
    TLS_DH_RSA_WITH_AES_128_GCM_SHA256 (0x00a0)
    TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x009e)
    TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (0x0067)
    TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 (0x0040)
    TLS_DH_RSA_WITH_AES_128_CBC_SHA256 (0x003f)
    TLS_DH_DSS_WITH_AES_128_CBC_SHA256 (0x003e)
    TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033)
    TLS_DHE_DSS_WITH_AES_128_CBC_SHA (0x0032)
    TLS_DH_RSA_WITH_AES_128_CBC_SHA (0x0031)
    TLS_DH_DSS_WITH_AES_128_CBC_SHA (0x0030)
    TLS_DHE_RSA_WITH_SEED_CBC_SHA (0x009a)
    TLS_DHE_DSS_WITH_SEED_CBC_SHA (0x0099)
    TLS_DH_RSA_WITH_SEED_CBC_SHA (0x0098)
    TLS_DH_DSS_WITH_SEED_CBC_SHA (0x0097)
    TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (0x0045)
    TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA (0x0044)
    TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA (0x0043)
    TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA (0x0042)
    TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 (0xc031)
    TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02d)
    TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 (0xc029)
    TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 (0xc025)
    TLS_ECDH_RSA_WITH_AES_128_CBC_SHA (0xc00e)
    TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA (0xc004)
    TLS_RSA_WITH_AES_128_GCM_SHA256 (0x009c)
    TLS_RSA_WITH_AES_128_CBC_SHA256 (0x003c)
    TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)
    TLS_RSA_WITH_SEED_CBC_SHA (0x0096)
    TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (0x0041)
    TLS_RSA_WITH_IDEA_CBC_SHA (0x0007)
    TLS_ECDHE_RSA_WITH_RC4_128_SHA (0xc011)
    TLS_ECDHE_ECDSA_WITH_RC4_128_SHA (0xc007)
    TLS_ECDH_RSA_WITH_RC4_128_SHA (0xc00c)
    TLS_ECDH_ECDSA_WITH_RC4_128_SHA (0xc002)
    TLS_RSA_WITH_RC4_128_SHA (0x0005)
    TLS_RSA_WITH_RC4_128_MD5 (0x0004)
    TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (0xc012)
    TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA (0xc008)
    TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (0x0016)
    TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA (0x0013)
    TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA (0x0010)
    TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA (0x000d)
    TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA (0xc00d)
    TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA (0xc003)
    TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)
    TLS_DHE_RSA_WITH_DES_CBC_SHA (0x0015)
    TLS_DHE_DSS_WITH_DES_CBC_SHA (0x0012)
    TLS_DH_RSA_WITH_DES_CBC_SHA (0x000f)
    TLS_DH_DSS_WITH_DES_CBC_SHA (0x000c)
    TLS_RSA_WITH_DES_CBC_SHA (0x0009)
    TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0x00ff)

    © 2025 Palo Alto Networks, Inc. All rights reserved.