Operational Defect Database

BugZero updated this defect 13 days ago.

Palo Alto Networks | PAN-254236

TLSv1.3 hybridized Kyber support in the latest versions of Chrome and Edge browsers results in dropped Client Hello packets when SSL/TLS handshake inspection is enabled. Workaround: Disable SSL/TLS handshake inspection .

Last update date:

5/6/2024

Affected products:

Pan OS

Affected releases:

11.2.0

Fixed releases:

No fixed releases provided.

Description:

The earliest recollection of this bug is traced back to PAN-OS 11.2.0 - May 06, 2024. TLSv1.3 hybridized Kyber support in the latest versions of Chrome and Edge browsers results in dropped Client Hello packets when SSL/TLS handshake inspection is enabled. Workaround: Disable SSL/TLS handshake inspection . For more information: https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-0-known-and-addressed-issues/pan-os-11-2-0-known-issues

Additional Resources / Links

Share:

BugZero® Risk Score

What's this?

Coming soon

Status

Known

Learn More

Search:

...