How to view the SSH cipher suites supported on the Firewall using non-Palo Alto Networks tools

• Palo Alto Firewalls
• Supported PAN-OS
• SSH Cipher Suites

1. Using Nmap in Linux

 Nmap --script ssh2-enum-algos -sV -p 22 <your_firewall_ip>

2. Zenmap on Windows

• Zenmap can be downloaded here
• Add the command "nmap --script ssh2-enum-algos -sV -p 22" in the command field and the target IP address in the target field. Zenmap will automatically add the target IP address in the command field. If you manually add the target IP address in the command line, the scan may not work

3. Putty

• Putty can be downloaded here
• Follow these 4 steps
  1. Under session > logging, select SSH packets and raw data
  2. Add the log name under Log file name (the default name is putty.log)

3. Connect to the Firewall management interface via ssh using putty under Session 

4. Open the logs downloaded in the client.

• The logs should have the SSH packets, and review the Incoming raw data.