13315 - What are the Supported Cipher Suites on the Pulse Secure Virtual Traffic Manager (vTM)?

Printable View

« Go Back

Information

Last Modified Date	11/27/2017 1:28 AM

Synopsis

What are the Supported Cipher Suites on the Pulse Secure Virtual Traffic Manager (vTM)?

This article lists and provides information on the supported Cipher Suites for Pulse Secure Virtual Traffic Manager (vTM) 20.1 in SSL decrypt and/or encrypt mode.

Problem or Goal

Not Applicable

Cause

Not Applicable

Solution

The SSL Configuration settings can be viewed from System > Global Settings > SSL Configuration .

User-added image

The information below includes the 'Elliptic Curve' ciphers added starting in vTM version 20.1 and was taken from a vTM running 20.1. The cipher suites in Version 20.1 are referred to as 'ssl!cipher_suites' and it includes SSLv3 and TLS.

The default order is:

1	TLS_AES_128_GCM_SHA256 (0x13, 0x01)
2	TLS_AES_256_GCM_SHA384 (0x13, 0x02)
3	SSL_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xC0, 0x2B)
4	SSL_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xC0, 0x23)
5	SSL_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xC0, 0x09)
6	SSL_RSA_WITH_AES_128_GCM_SHA256 (0x00, 0x9C)
7	SSL_RSA_WITH_AES_128_CBC_SHA256 (0x00, 0x3C)
8	SSL_DHE_DSS_WITH_AES_128_CBC_SHA256 (0x00, 0x40)
9	SSL_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC0, 0x2F)
10	SSL_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x00, 0x9E)
11	SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xC0, 0x27)
12	SSL_DHE_RSA_WITH_AES_128_CBC_SHA256 (0x00, 0x67)
13	SSL_RSA_WITH_AES_128_CBC_SHA (0x00, 0x2F)
14	SSL_DHE_DSS_WITH_AES_128_CBC_SHA (0x00, 0x32)
15	SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xC0, 0x13)
16	SSL_DHE_RSA_WITH_AES_128_CBC_SHA (0x00, 0x33)
17	SSL_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xC0, 0x2C)
18	SSL_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xC0, 0x0A)
19	SSL_RSA_WITH_AES_256_GCM_SHA384 (0x00, 0x9D)
20	SSL_RSA_WITH_AES_256_CBC_SHA256 (0x00, 0x3D)
21	SSL_DHE_DSS_WITH_AES_256_CBC_SHA256 (0x00, 0x6A)
22	SSL_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xC0, 0x30)
23	SSL_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x00, 0x9F)
24	SSL_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x00, 0x6B)
25	SSL_RSA_WITH_AES_256_CBC_SHA (0x00, 0x35)
26	SSL_DHE_DSS_WITH_AES_256_CBC_SHA (0x00, 0x38)
27	SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xC0, 0x14)
28	SSL_DHE_RSA_WITH_AES_256_CBC_SHA (0x00, 0x39)

Note: The number in parentheses refers to the IANA registered value.

In addition, the following cipher suites are supported but disabled by default:

1	SSL_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (0xC0, 0x24)
2	SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xC0, 0x28)
3	SSL_RSA_WITH_3DES_EDE_CBC_SHA (0x00, 0x0a)
4	SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA (0x00, 0x13)
5	SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA (0x00, 0x16)
6	SSL_RSA_WITH_RC4_128_SHA (0x00, 0x05)
7	SSL_RSA_WITH_RC4_128_MD5 (0x00, 0x04)
8	SSL_RSA_WITH_DES_CBC_SHA (0x00, 0x09)
9	SSL_DHE_DSS_WITH_DES_CBC_SHA (0x00, 0x12)
10	SSL_DHE_RSA_WITH_DES_CBC_SHA (0x00, 0x15)
11	SSL_RSA_WITH_NULL_SHA256 (0x00, 0x3B)
12	SSL_RSA_WITH_NULL_SHA (0x00, 0x02)
13	SSL_RSA_WITH_NULL_MD5 (0x00, 0x01)

Related Articles

13315 - What are the Supported Cipher Suites on the Pulse Secure Virtual Traffic Manager (vTM)?

Information

What are the Supported Cipher Suites on the Pulse Secure Virtual Traffic Manager (vTM)?

Feedback

Was this article helpful?