Configuring allowed algorithms

Palo Alto Networks Trust Protection Foundation supports many algorithms1. As a system administrator, you can define which algorithms your organization can track and use at the platform level, and set their priority. Policies can further restrict allowed algorithms, if needed.

By default, Palo Alto Networks Trust Protection Foundation has enabled all but the most insecure algorithms. When your administrator installed Palo Alto Networks Trust Protection Foundation, they had the option to change those default settings. If you find they need further refinement, a system administrator can make future changes in Trust Protection Foundation Configuration Console (VCC).

To configure allowed algorithms in Trust Protection Foundation Configuration Console

  1. In Trust Protection Foundation Configuration Console, under the root node, go to the Actions panel and click Configure Allowed Algorithms.

  2. If prompted, enter the local master administrator credentials.

  3. In the Default Algorithm Configuration window, adjust the allowed algorithms:

    • Use the left and right arrows to add or remove algorithms.

    • Use the up and down arrows to change the priority of allowed algorithms.

  4. Click Apply to save your changes.

For additional information, see About default algorithm configuration.