The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Supported cipher suites for proxy SSL inspection

Prev Next

The following is the complete list of SSL cipher suites (as named in their respective RFCs) that are supported for Proxy SSL inspection:

  • SSLv3 cipher suites:
    • TLS_RSA_WITH_AES_256_CBC_SHA
    • TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
    • TLS_RSA_WITH_AES_128_CBC_SHA
    • TLS_RSA_WITH_SEED_CBC_SHA
    • TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
    • TLS_RSA_WITH_RC4_128_SHA
    • TLS_RSA_WITH_RC4_128_MD5
    • TLS_RSA_WITH_3DES_EDE_CBC_SHA
    • TLS_RSA_WITH_NULL_SHA
    • TLS_RSA_WITH_NULL_MD5
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA
    • TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
    • TLS_DH_anon_WITH_AES_256_CBC_SHA
    • TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA
    • TLS_DHE_RSA_WITH_SEED_CBC_SHA
    • TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
    • TLS_DH_anon_WITH_AES_128_CBC_SHA
    • TLS_DH_anon_WITH_SEED_CBC_SHA
    • TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
    • TLS_DH_anon_WITH_RC4_128_MD5
    • SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
    • TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
  • TLSv1 cipher suites:
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
    • TLS_ECDH_anon_WITH_AES_256_CBC_SHA
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
    • TLS_ECDH_anon_WITH_AES_128_CBC_SHA
    • TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
    • TLS_ECDHE_RSA_WITH_RC4_128_SHA
    • TLS_ECDH_anon_WITH_RC4_128_SHA
    • TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
    • TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
    • TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
    • TLS_ECDHE_ECDSA_WITH_NULL_SHA
    • TLS_ECDHE_RSA_WITH_NULL_SHA
    • TLS_ECDH_anon_WITH_NULL_SHA
  • TLSv1.2 cipher suites:
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    • TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
    • TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
    • TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8
    • TLS_ECDHE_ECDSA_WITH_AES_256_CCM
    • TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384
    • TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
    • TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
    • TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
    • TLS_RSA_WITH_AES_256_GCM_SHA384
    • TLS_RSA_WITH_AES_256_CCM_8
    • TLS_RSA_WITH_AES_256_CCM
    • TLS_RSA_WITH_ARIA_256_GCM_SHA384
    • TLS_RSA_WITH_AES_256_CBC_SHA256
    • TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
    • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
    • TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8
    • TLS_ECDHE_ECDSA_WITH_AES_128_CCM
    • TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256
    • TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
    • TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
    • TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
    • TLS_RSA_WITH_AES_128_GCM_SHA256
    • TLS_RSA_WITH_AES_128_CCM_8
    • TLS_RSA_WITH_AES_128_CCM
    • TLS_RSA_WITH_ARIA_128_GCM_SHA256
    • TLS_RSA_WITH_AES_128_CBC_SHA256
    • TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
    • TLS_RSA_WITH_NULL_SHA256
    • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    • TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
    • TLS_DHE_RSA_WITH_AES_256_CCM_8
    • TLS_DHE_RSA_WITH_AES_256_CCM
    • TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384
    • TLS_DH_anon_WITH_AES_256_GCM_SHA384
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
    • TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
    • TLS_DH_anon_WITH_AES_256_CBC_SHA256
    • TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256
    • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
    • TLS_DHE_RSA_WITH_AES_128_CCM_8
    • TLS_DHE_RSA_WITH_AES_128_CCM
    • TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256
    • TLS_DH_anon_WITH_AES_128_GCM_SHA256
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
    • TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
    • TLS_DH_anon_WITH_AES_128_CBC_SHA256
    • TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256
  • TLSv1.3 cipher suites:
    • TLS_AES_128_CCM_SHA256
    • TLS_AES_128_CCM_8_SHA256
    • TLS_AES_128_GCM_SHA256
    • TLS_AES_256_GCM_SHA384
    • TLS_CHACHA20_POLY1305_SHA256