如何禁用弱SSL密码SSL/TLS内的服务配置文件Panorama模板
15576
Created On 03/29/23 17:47 PM - Last Modified 04/07/23 07:39 AM
Objective
禁用弱SSL密码SSL/TLS特定范围内的服务配置文件Panorama模板
Environment
- Panorama
- PAN-OS 9.1及以上
Procedure
- 进入PanoramaCLI.
- 要查看密码列表,请输入以下命令并点击TAB钥匙。
# set template my-template config shared ssl-tls-service-profile test protocol-settings ---(HIT TAB) + auth-algo-sha1 Allow authentication SHA1 + auth-algo-sha256 Allow authentication SHA256 + auth-algo-sha384 Allow authentication SHA384 + enc-algo-3des Allow algorithm 3DES + enc-algo-aes-128-cbc Allow algorithm AES-128-CBC + enc-algo-aes-128-gcm Allow algorithm AES-128-GCM + enc-algo-aes-256-cbc Allow algorithm AES-256-CBC + enc-algo-aes-256-gcm Allow algorithm AES-256-GCM + enc-algo-rc4 Allow algorithm RC4 + keyxchg-algo-dhe Allow algorithm DHE + keyxchg-algo-ecdhe Allow algorithm ECDHE + keyxchg-algo-rsa Allow algorithm RSA + max-version max-version + min-version min-version <Enter> Finish input
- 找到您要禁用的弱密码,然后使用下面的命令选择否
# set template [Template name] config shared ssl-tls-service-profile [profile name] protocol-settings [cipher] no
*(示例禁用enc-algo-3des )
# set template my-template config shared ssl-tls-service-profile test protocol-settings enc-algo-3des no
- 致力于Panorama.
Additional Information
HOW TO DISABLE MEDIUM STRENGTH SSL CIPHERS FOR SSL/TLS SERVICE PROFILE FOR FIREWALL