Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • Administration Guide

    Home FortiWeb 7.2.6 Administration Guide
    7.2.6
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.10
    7.0.9
    7.0.8
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.2
    6.4.1
    6.4.0
    6.3.23
    6.3.19
    6.3.18
    6.3.17
    6.3.16
    6.3.15
    6.3.14
    6.3.13
    6.3.11
    6.3.10
    6.3.9
    6.3.7
    6.3.6
    6.3.5
    6.3.4
    6.3.3
    6.3.2
    6.3.1
    6.3.0
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.2.0
    6.1.2
    6.1.1
    5.7.0
    5.6.1
    5.6.0
    5.6.0

    Supported cipher suites - for connection between FortiWeb and back-end servers

    Supported cipher suites - for connection between FortiWeb and back-end servers
    High SSL/TLS encryption levels
    Cipher TLS 1.3 TLS 1.2 TLS 1.0, 1.1

    AES_256_GCM_SHA384

    Yes

    CHACHA20_POLY1305_SHA256

    Yes

    AES_128_GCM_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

    Yes

    ECDHE_RSA_WITH_AES_256_GCM_SHA384

    Yes

    DHE_DSS_WITH_AES_256_GCM_SHA384

    Yes

    DHE_RSA_WITH_AES_256_GCM_SHA384

    Yes

    ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

    Yes

    ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

    Yes

    DHE_RSA_WITH_CHACHA20_POLY1305_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_CCM_8

    Yes

    ECDHE_ECDSA_WITH_AES_256_CCM

    Yes

    DHE_RSA_WITH_AES_256_CCM_8

    Yes

    DHE_RSA_WITH_AES_256_CCM

    Yes

    ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384

    Yes

    ECDHE_RSA_WITH_ARIA_256_GCM_SHA384

    Yes

    DHE_DSS_WITH_ARIA_256_GCM_SHA384

    Yes

    DHE_RSA_WITH_ARIA_256_GCM_SHA384

    Yes

    ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

    Yes

    ECDHE_RSA_WITH_AES_128_GCM_SHA256

    Yes

    DHE_DSS_WITH_AES_128_GCM_SHA256

    Yes

    DHE_RSA_WITH_AES_128_GCM_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_128_CCM_8

    Yes

    ECDHE_ECDSA_WITH_AES_128_CCM

    Yes

    DHE_RSA_WITH_AES_128_CCM_8

    Yes

    DHE_RSA_WITH_AES_128_CCM

    Yes

    ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256

    Yes

    ECDHE_RSA_WITH_ARIA_128_GCM_SHA256

    Yes

    DHE_DSS_WITH_ARIA_128_GCM_SHA256

    Yes

    DHE_RSA_WITH_ARIA_128_GCM_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

    Yes

    ECDHE_RSA_WITH_AES_256_CBC_SHA384

    Yes

    DHE_RSA_WITH_AES_256_CBC_SHA256

    Yes

    DHE_DSS_WITH_AES_256_CBC_SHA256

    Yes

    ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384

    Yes

    ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384

    Yes

    DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256

    Yes

    DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256

    Yes

    Yes
    ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

    Yes

    ECDHE_RSA_WITH_AES_128_CBC_SHA256

    Yes

    DHE_RSA_WITH_AES_128_CBC_SHA256

    Yes

    DHE_DSS_WITH_AES_128_CBC_SHA256

    Yes

    Yes
    ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    ECDHE_RSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_AES_256_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_CAMELLIA_256_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_CAMELLIA_256_CBC_SHA

    Yes

    ECDHE_ECDSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    ECDHE_RSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_AES_128_CBC_SHA

    Yes

    DHE_RSA_WITH_CAMELLIA_128_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_CAMELLIA_128_CBC_SHA

    Yes

    Yes
    RSA_WITH_AES_256_GCM_SHA384

    Yes

    RSA_WITH_AES_256_CCM_8

    Yes

    RSA_WITH_AES_256_CCM

    Yes

    RSA_WITH_ARIA_256_GCM_SHA384

    Yes

    RSA_WITH_AES_128_GCM_SHA256

    Yes

    RSA_WITH_AES_128_CCM_8

    Yes

    RSA_WITH_AES_128_CCM

    Yes

    RSA_WITH_ARIA_128_GCM_SHA256

    Yes

    RSA_WITH_AES_256_CBC_SHA256

    Yes

    RSA_WITH_CAMELLIA_256_CBC_SHA256

    Yes

    RSA_WITH_AES_128_CBC_SHA256

    Yes

    RSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    RSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    RSA_WITH_CAMELLIA_256_CBC_SHA

    Yes

    Yes
    RSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    RSA_WITH_CAMELLIA_128_CBC_SHA

    Yes

    Yes
    Medium SSL/TLS encryption levels
    Cipher TLS 1.3 TLS 1.2 TLS 1.0, 1.1

    AES_256_GCM_SHA384

    Yes

    CHACHA20_POLY1305_SHA256

    Yes

    AES_128_GCM_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

    Yes

    ECDHE_RSA_WITH_AES_256_GCM_SHA384

    Yes

    DHE_DSS_WITH_AES_256_GCM_SHA384

    Yes

    DHE_RSA_WITH_AES_256_GCM_SHA384

    Yes

    ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

    Yes

    ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

    Yes

    DHE_RSA_WITH_CHACHA20_POLY1305_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_CCM_8

    Yes

    ECDHE_ECDSA_WITH_AES_256_CCM

    Yes

    DHE_RSA_WITH_AES_256_CCM_8

    Yes

    DHE_RSA_WITH_AES_256_CCM

    Yes

    ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384

    Yes

    ECDHE_RSA_WITH_ARIA_256_GCM_SHA384

    Yes

    DHE_DSS_WITH_ARIA_256_GCM_SHA384

    Yes

    DHE_RSA_WITH_ARIA_256_GCM_SHA384

    Yes

    ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

    Yes

    ECDHE_RSA_WITH_AES_128_GCM_SHA256

    Yes

    DHE_DSS_WITH_AES_128_GCM_SHA256

    Yes

    DHE_RSA_WITH_AES_128_GCM_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_128_CCM_8

    Yes

    ECDHE_ECDSA_WITH_AES_128_CCM

    Yes

    DHE_RSA_WITH_AES_128_CCM_8

    Yes

    DHE_RSA_WITH_AES_128_CCM

    Yes

    ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256

    Yes

    ECDHE_RSA_WITH_ARIA_128_GCM_SHA256

    Yes

    DHE_DSS_WITH_ARIA_128_GCM_SHA256

    Yes

    DHE_RSA_WITH_ARIA_128_GCM_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

    Yes

    ECDHE_RSA_WITH_AES_256_CBC_SHA384

    Yes

    DHE_RSA_WITH_AES_256_CBC_SHA256

    Yes

    DHE_DSS_WITH_AES_256_CBC_SHA256

    Yes

    ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384

    Yes

    ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384

    Yes

    DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256

    Yes

    DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256

    Yes

    Yes
    ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

    Yes

    ECDHE_RSA_WITH_AES_128_CBC_SHA256

    Yes

    DHE_RSA_WITH_AES_128_CBC_SHA256

    Yes

    DHE_DSS_WITH_AES_128_CBC_SHA256

    Yes

    Yes
    ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    ECDHE_RSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_AES_256_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_CAMELLIA_256_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_CAMELLIA_256_CBC_SHA

    Yes

    ECDHE_ECDSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    ECDHE_RSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_AES_128_CBC_SHA

    Yes

    DHE_RSA_WITH_CAMELLIA_128_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_CAMELLIA_128_CBC_SHA

    Yes

    Yes
    RSA_WITH_AES_256_GCM_SHA384

    Yes

    RSA_WITH_AES_256_CCM_8

    Yes

    RSA_WITH_AES_256_CCM

    Yes

    RSA_WITH_ARIA_256_GCM_SHA384

    Yes

    RSA_WITH_AES_128_GCM_SHA256

    Yes

    RSA_WITH_AES_128_CCM_8

    Yes

    RSA_WITH_AES_128_CCM

    Yes

    RSA_WITH_ARIA_128_GCM_SHA256

    Yes

    RSA_WITH_AES_256_CBC_SHA256

    Yes

    RSA_WITH_CAMELLIA_256_CBC_SHA256

    Yes

    RSA_WITH_AES_128_CBC_SHA256

    Yes

    RSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    RSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    RSA_WITH_CAMELLIA_256_CBC_SHA

    Yes

    Yes
    RSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    RSA_WITH_CAMELLIA_128_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_SEED_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_SEED_CBC_SHA

    Yes

    Yes
    ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA

    Yes

    Yes
    ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_3DES_EDE_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_3DES_EDE_CBC_SHA

    Yes

    Yes
    RSA_WITH_SEED_CBC_SHA

    Yes

    Yes
    RSA_WITH_IDEA_CBC_SHA

    Yes

    Yes
    RSA_WITH_3DES_EDE_CBC_SHA

    Yes

    Yes

    Note: All the medium level ciphers are also supported by the high encryption level, except for those ciphers highlighted in red.

    Generally speaking, for security reasons, SHA-1 is preferable, although you may not be able to use it for client compatibility reasons. Avoid using:

    • Older hash algorithms, such as MD5. To disable MD5, for SSL/TLS encryption level, select High.
    • Encryption bit strengths less than 128
    • Older styles of renegotiation (These are vulnerable to Man-in-the-Middle (MITM) attacks.)
    • Client-initiated renegotiation. Configure Configuring an HTTP server policy.
    Customized-only SSL/TLS encryption levels

    The ciphers in the customized level can be viewed in the GUI, so we won't be listing them in this guide.

    All the customized ciphers are included in the high and medium level cipher table listed above, with the exception of the ciphers mentioned in the table below.

    Cipher TLS 1.3 TLS 1.2 TLS 1.0, 1.1

    TLS_AES_128_CCM_SHA256

    		 Yes

    TLS_AES_128_CCM_8_SHA256

    		 Yes
    Previous
    Next

    Supported cipher suites - for connection between FortiWeb and back-end servers

    Supported cipher suites - for connection between FortiWeb and back-end servers
    High SSL/TLS encryption levels
    Cipher TLS 1.3 TLS 1.2 TLS 1.0, 1.1

    AES_256_GCM_SHA384

    Yes

    CHACHA20_POLY1305_SHA256

    Yes

    AES_128_GCM_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

    Yes

    ECDHE_RSA_WITH_AES_256_GCM_SHA384

    Yes

    DHE_DSS_WITH_AES_256_GCM_SHA384

    Yes

    DHE_RSA_WITH_AES_256_GCM_SHA384

    Yes

    ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

    Yes

    ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

    Yes

    DHE_RSA_WITH_CHACHA20_POLY1305_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_CCM_8

    Yes

    ECDHE_ECDSA_WITH_AES_256_CCM

    Yes

    DHE_RSA_WITH_AES_256_CCM_8

    Yes

    DHE_RSA_WITH_AES_256_CCM

    Yes

    ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384

    Yes

    ECDHE_RSA_WITH_ARIA_256_GCM_SHA384

    Yes

    DHE_DSS_WITH_ARIA_256_GCM_SHA384

    Yes

    DHE_RSA_WITH_ARIA_256_GCM_SHA384

    Yes

    ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

    Yes

    ECDHE_RSA_WITH_AES_128_GCM_SHA256

    Yes

    DHE_DSS_WITH_AES_128_GCM_SHA256

    Yes

    DHE_RSA_WITH_AES_128_GCM_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_128_CCM_8

    Yes

    ECDHE_ECDSA_WITH_AES_128_CCM

    Yes

    DHE_RSA_WITH_AES_128_CCM_8

    Yes

    DHE_RSA_WITH_AES_128_CCM

    Yes

    ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256

    Yes

    ECDHE_RSA_WITH_ARIA_128_GCM_SHA256

    Yes

    DHE_DSS_WITH_ARIA_128_GCM_SHA256

    Yes

    DHE_RSA_WITH_ARIA_128_GCM_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

    Yes

    ECDHE_RSA_WITH_AES_256_CBC_SHA384

    Yes

    DHE_RSA_WITH_AES_256_CBC_SHA256

    Yes

    DHE_DSS_WITH_AES_256_CBC_SHA256

    Yes

    ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384

    Yes

    ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384

    Yes

    DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256

    Yes

    DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256

    Yes

    Yes
    ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

    Yes

    ECDHE_RSA_WITH_AES_128_CBC_SHA256

    Yes

    DHE_RSA_WITH_AES_128_CBC_SHA256

    Yes

    DHE_DSS_WITH_AES_128_CBC_SHA256

    Yes

    Yes
    ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    ECDHE_RSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_AES_256_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_CAMELLIA_256_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_CAMELLIA_256_CBC_SHA

    Yes

    ECDHE_ECDSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    ECDHE_RSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_AES_128_CBC_SHA

    Yes

    DHE_RSA_WITH_CAMELLIA_128_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_CAMELLIA_128_CBC_SHA

    Yes

    Yes
    RSA_WITH_AES_256_GCM_SHA384

    Yes

    RSA_WITH_AES_256_CCM_8

    Yes

    RSA_WITH_AES_256_CCM

    Yes

    RSA_WITH_ARIA_256_GCM_SHA384

    Yes

    RSA_WITH_AES_128_GCM_SHA256

    Yes

    RSA_WITH_AES_128_CCM_8

    Yes

    RSA_WITH_AES_128_CCM

    Yes

    RSA_WITH_ARIA_128_GCM_SHA256

    Yes

    RSA_WITH_AES_256_CBC_SHA256

    Yes

    RSA_WITH_CAMELLIA_256_CBC_SHA256

    Yes

    RSA_WITH_AES_128_CBC_SHA256

    Yes

    RSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    RSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    RSA_WITH_CAMELLIA_256_CBC_SHA

    Yes

    Yes
    RSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    RSA_WITH_CAMELLIA_128_CBC_SHA

    Yes

    Yes
    Medium SSL/TLS encryption levels
    Cipher TLS 1.3 TLS 1.2 TLS 1.0, 1.1

    AES_256_GCM_SHA384

    Yes

    CHACHA20_POLY1305_SHA256

    Yes

    AES_128_GCM_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

    Yes

    ECDHE_RSA_WITH_AES_256_GCM_SHA384

    Yes

    DHE_DSS_WITH_AES_256_GCM_SHA384

    Yes

    DHE_RSA_WITH_AES_256_GCM_SHA384

    Yes

    ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

    Yes

    ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

    Yes

    DHE_RSA_WITH_CHACHA20_POLY1305_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_CCM_8

    Yes

    ECDHE_ECDSA_WITH_AES_256_CCM

    Yes

    DHE_RSA_WITH_AES_256_CCM_8

    Yes

    DHE_RSA_WITH_AES_256_CCM

    Yes

    ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384

    Yes

    ECDHE_RSA_WITH_ARIA_256_GCM_SHA384

    Yes

    DHE_DSS_WITH_ARIA_256_GCM_SHA384

    Yes

    DHE_RSA_WITH_ARIA_256_GCM_SHA384

    Yes

    ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

    Yes

    ECDHE_RSA_WITH_AES_128_GCM_SHA256

    Yes

    DHE_DSS_WITH_AES_128_GCM_SHA256

    Yes

    DHE_RSA_WITH_AES_128_GCM_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_128_CCM_8

    Yes

    ECDHE_ECDSA_WITH_AES_128_CCM

    Yes

    DHE_RSA_WITH_AES_128_CCM_8

    Yes

    DHE_RSA_WITH_AES_128_CCM

    Yes

    ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256

    Yes

    ECDHE_RSA_WITH_ARIA_128_GCM_SHA256

    Yes

    DHE_DSS_WITH_ARIA_128_GCM_SHA256

    Yes

    DHE_RSA_WITH_ARIA_128_GCM_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

    Yes

    ECDHE_RSA_WITH_AES_256_CBC_SHA384

    Yes

    DHE_RSA_WITH_AES_256_CBC_SHA256

    Yes

    DHE_DSS_WITH_AES_256_CBC_SHA256

    Yes

    ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384

    Yes

    ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384

    Yes

    DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256

    Yes

    DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256

    Yes

    Yes
    ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

    Yes

    ECDHE_RSA_WITH_AES_128_CBC_SHA256

    Yes

    DHE_RSA_WITH_AES_128_CBC_SHA256

    Yes

    DHE_DSS_WITH_AES_128_CBC_SHA256

    Yes

    Yes
    ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    ECDHE_ECDSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    ECDHE_RSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_AES_256_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_CAMELLIA_256_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_CAMELLIA_256_CBC_SHA

    Yes

    ECDHE_ECDSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    ECDHE_RSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_AES_128_CBC_SHA

    Yes

    DHE_RSA_WITH_CAMELLIA_128_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_CAMELLIA_128_CBC_SHA

    Yes

    Yes
    RSA_WITH_AES_256_GCM_SHA384

    Yes

    RSA_WITH_AES_256_CCM_8

    Yes

    RSA_WITH_AES_256_CCM

    Yes

    RSA_WITH_ARIA_256_GCM_SHA384

    Yes

    RSA_WITH_AES_128_GCM_SHA256

    Yes

    RSA_WITH_AES_128_CCM_8

    Yes

    RSA_WITH_AES_128_CCM

    Yes

    RSA_WITH_ARIA_128_GCM_SHA256

    Yes

    RSA_WITH_AES_256_CBC_SHA256

    Yes

    RSA_WITH_CAMELLIA_256_CBC_SHA256

    Yes

    RSA_WITH_AES_128_CBC_SHA256

    Yes

    RSA_WITH_CAMELLIA_128_CBC_SHA256

    Yes

    RSA_WITH_AES_256_CBC_SHA

    Yes

    Yes
    RSA_WITH_CAMELLIA_256_CBC_SHA

    Yes

    Yes
    RSA_WITH_AES_128_CBC_SHA

    Yes

    Yes
    RSA_WITH_CAMELLIA_128_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_SEED_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_SEED_CBC_SHA

    Yes

    Yes
    ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA

    Yes

    Yes
    ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

    Yes

    Yes
    DHE_RSA_WITH_3DES_EDE_CBC_SHA

    Yes

    Yes
    DHE_DSS_WITH_3DES_EDE_CBC_SHA

    Yes

    Yes
    RSA_WITH_SEED_CBC_SHA

    Yes

    Yes
    RSA_WITH_IDEA_CBC_SHA

    Yes

    Yes
    RSA_WITH_3DES_EDE_CBC_SHA

    Yes

    Yes

    Note: All the medium level ciphers are also supported by the high encryption level, except for those ciphers highlighted in red.

    Generally speaking, for security reasons, SHA-1 is preferable, although you may not be able to use it for client compatibility reasons. Avoid using:

    • Older hash algorithms, such as MD5. To disable MD5, for SSL/TLS encryption level, select High.
    • Encryption bit strengths less than 128
    • Older styles of renegotiation (These are vulnerable to Man-in-the-Middle (MITM) attacks.)
    • Client-initiated renegotiation. Configure Configuring an HTTP server policy.
    Customized-only SSL/TLS encryption levels

    The ciphers in the customized level can be viewed in the GUI, so we won't be listing them in this guide.

    All the customized ciphers are included in the high and medium level cipher table listed above, with the exception of the ciphers mentioned in the table below.

    Cipher TLS 1.3 TLS 1.2 TLS 1.0, 1.1

    TLS_AES_128_CCM_SHA256

    		 Yes

    TLS_AES_128_CCM_8_SHA256

    		 Yes
    Previous
    Next