SSL/TLS Service Profile selection not working via GUI

SSL/TLS Service Profile selection not working via GUI

2569
Created On 01/30/24 02:58 AM - Last Modified 05/22/24 20:49 PM


Symptom


SSL/TLS Service Profile selection not working via GUI.

Environment


  • Any Panorama
  • PANOS-11.0.x
  • SSL-TLS Profile


Cause


  • Management TLS mode under Panorama > Setup > Management > General Settings  is set to "exclude-tlsv1.3".
  • When TLS mode is set to exclude tls1.3, applying ssl/tls profile may fail.


Resolution


  1. Change the Management TLS Mode to mixed-mode under Panorama > Setup > Management > General Settings. Select certificate, click OK.
  2. Revert the Management TLS Mode back to exclude-tlsv1.3 mode and select ssl/tls service profile, click OK.
  3. Commit the configuration.
image.png
 
 
 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008WsPCAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail