The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Supported web servers and cipher suites for inbound SSL inspection

  • Published on Oct 5, 2026
  • 1 minute(s) read
Prev Next

SSL decryption is supported for the following web servers:

  • Apache

  • Tomcat

  • Nginx

In addition to the above web servers, the following web servers are also supported for the RSA ciphers:

  • Microsoft Internet Information Server (IIS)

  • IBM WebSphere

While Trellix IPS offers three decryption methods for inbound SSL inspection — Known-key, Agent based and Proxy — each of them supports a list of cipher suites for traffic decryption.

List of SSL cipher suites (as named in their respective RFCs) supported for Known-key method:

  • SSLv3/TLSv1.0 cipher suites:

    • TLS_NULL_WITH_NULL_NULL

    • TLS_RSA_WITH_NULL_MD5

    • TLS_RSA_WITH_NULL_SHA

    • TLS_RSA_WITH_RC4_128_MD5

    • TLS_RSA_WITH_RC4_128_SHA

    • TLS_RSA_WITH_IDEA_CBC_SHA

    • TLS_RSA_WITH_DES_CBC_SHA

    • TLS_RSA_WITH_3DES_EDE_CBC_SHA

  • TLSv1.1 cipher suites:

    • TLS_NULL_WITH_NULL_NULL

    • TLS_RSA_WITH_NULL_MD5

    • TLS_RSA_WITH_NULL_SHA

    • TLS_RSA_WITH_RC4_128_MD5

    • TLS_RSA_WITH_RC4_128_SHA

    • TLS_RSA_WITH_IDEA_CBC_SHA

    • TLS_RSA_WITH_DES_CBC_SHA

    • TLS_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_RSA_WITH_AES_128_CBC_SHA

    • TLS_RSA_WITH_AES_256_CBC_SHA

  • TLSv1.2 cipher suites:

    • TLS_NULL_WITH_NULL_NULL

    • TLS_RSA_WITH_NULL_MD5

    • TLS_RSA_WITH_NULL_SHA

    • TLS_RSA_WITH_NULL_SHA256

    • TLS_RSA_WITH_RC4_128_MD5

    • TLS_RSA_WITH_RC4_128_SHA

    • TLS_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_RSA_WITH_AES_128_CBC_SHA

    • TLS_RSA_WITH_AES_256_CBC_SHA

    • TLS_RSA_WITH_AES_128_CBC_SHA256

    • TLS_RSA_WITH_AES_256_CBC_SHA256

    • TLS_RSA_WITH_AES_128_GCM_SHA256

    • TLS_RSA_WITH_AES_256_GCM_SHA384

List of SSL cipher suites (as named in their respective RFCs) supported for Agent based method:

  • SSLv3/TLSv1.0 cipher suites:

    • TLS_NULL_WITH_NULL_NULL

    • SSL/TLS_RSA_WITH_NULL_MD5

    • SSL/TLS_RSA_WITH_NULL_SHA

    • SSL/TLS_RSA_WITH_RC4_128_MD5

    • SSL/TLS_RSA_WITH_RC4_128_SHA

    • SSL/TLS_RSA_WITH_IDEA_CBC_SHA

    • SSL/TLS_RSA_WITH_DES_CBC_SHA

    • SSL/TLS_RSA_WITH_3DES_EDE_CBC_SHA

    • SSL/TLS_DH_DSS_WITH_DES_CBC_SHA

    • SSL/TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA

    • SSL/TLS_DH_RSA_WITH_DES_CBC_SHA

    • SSL/TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA

    • SSL/TLS_DHE_DSS_WITH_DES_CBC_SHA

    • SSL/TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA

    • SSL/TLS_DHE_RSA_WITH_DES_CBC_SHA

    • SSL/TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA

  • TLSv1.1 cipher suites:

    • TLS_NULL_WITH_NULL_NULL

    • TLS_RSA_WITH_NULL_MD5

    • TLS_RSA_WITH_NULL_SHA

    • TLS_RSA_WITH_RC4_128_MD5

    • TLS_RSA_WITH_RC4_128_SHA

    • TLS_RSA_WITH_IDEA_CBC_SHA

    • TLS_RSA_WITH_DES_CBC_SHA

    • TLS_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_RSA_WITH_AES_128_CBC_SHA

    • TLS_RSA_WITH_AES_256_CBC_SHA

    • TLS_DH_DSS_WITH_DES_CBC_SHA

    • TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA

    • TLS_DH_RSA_WITH_DES_CBC_SHA

    • TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_DHE_DSS_WITH_DES_CBC_SHA

    • TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA

    • TLS_DHE_RSA_WITH_DES_CBC_SHA

    • TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA

  • TLSv1.2 cipher suites:

    • TLS_NULL_WITH_NULL_NULL

    • TLS_RSA_WITH_NULL_MD5

    • TLS_RSA_WITH_NULL_SHA

    • TLS_RSA_WITH_NULL_SHA256

    • TLS_RSA_WITH_RC4_128_MD5

    • TLS_RSA_WITH_RC4_128_SHA

    • TLS_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_RSA_WITH_AES_128_CBC_SHA

    • TLS_RSA_WITH_AES_256_CBC_SHA

    • TLS_RSA_WITH_AES_128_CBC_SHA256

    • TLS_RSA_WITH_AES_256_CBC_SHA256

    • TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA

    • TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA

    • TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_DH_DSS_WITH_AES_128_CBC_SHA

    • TLS_DH_RSA_WITH_AES_128_CBC_SHA

    • TLS_DHE_DSS_WITH_AES_128_CBC_SHA

    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA

    • TLS_DH_DSS_WITH_AES_256_CBC_SHA

    • TLS_DH_RSA_WITH_AES_256_CBC_SHA

    • TLS_DHE_DSS_WITH_AES_256_CBC_SHA

    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA

    • TLS_DH_DSS_WITH_AES_128_CBC_SHA256

    • TLS_DH_RSA_WITH_AES_128_CBC_SHA256

    • TLS_DHE_DSS_WITH_AES_128_CBC_SHA256

    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA256

    • TLS_DH_DSS_WITH_AES_256_CBC_SHA256

    • TLS_DH_RSA_WITH_AES_256_CBC_SHA256

    • TLS_DHE_DSS_WITH_AES_256_CBC_SHA256

    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA256

    • TLS_RSA_WITH_AES_128_GCM_SHA256

    • TLS_RSA_WITH_AES_256_GCM_SHA384

    • TLS_DH_RSA_WITH_AES_128_GCM_SHA256

    • TLS_DH_RSA_WITH_AES_256_GCM_SHA384

    • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

    • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

  • ECDH/E Cipher suites:

    • TLS_ECDHE_RSA_WITH_NULL_SHA

    • TLS_ECDHE_RSA_WITH_RC4_128_SHA

    • TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

List of SSL cipher suites (as named in their respective RFCs) supported for Proxy method:

  • TLSv1.3 cipher suites:

    • TLS_AES_128_CCM_SHA256

    • TLS_AES_128_CCM_8_SHA256

    • TLS_AES_128_GCM_SHA256

    • TLS_AES_256_GCM_SHA384

    • TLS_CHACHA20_POLY1305_SHA256

  • TLSv1.2 cipher suites:

    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

    • TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

    • TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

    • TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8

    • TLS_ECDHE_ECDSA_WITH_AES_256_CCM

    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

    • TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384

    • TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384

    • TLS_RSA_WITH_AES_256_GCM_SHA384

    • TLS_RSA_WITH_AES_256_CCM_8

    • TLS_RSA_WITH_AES_256_CCM

    • TLS_RSA_WITH_AES_256_CBC_SHA256

    • TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256

    • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

    • TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8

    • TLS_ECDHE_ECDSA_WITH_AES_128_CCM

    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

    • TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256

    • TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256

    • TLS_RSA_WITH_AES_128_GCM_SHA256

    • TLS_RSA_WITH_AES_128_CCM_8

    • TLS_RSA_WITH_AES_128_CCM

    • TLS_RSA_WITH_AES_128_CBC_SHA256

    • TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256

    • TLS_RSA_WITH_NULL_SHA256

    • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

    • TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256

    • TLS_DHE_RSA_WITH_AES_256_CCM_8

    • TLS_DHE_RSA_WITH_AES_256_CCM

    • TLS_DH_anon_WITH_AES_256_GCM_SHA384

    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA256

    • TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256

    • TLS_DH_anon_WITH_AES_256_CBC_SHA256

    • TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256

    • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

    • TLS_DHE_RSA_WITH_AES_128_CCM_8

    • TLS_DHE_RSA_WITH_AES_128_CCM

    • TLS_DH_anon_WITH_AES_128_GCM_SHA256

    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA256

    • TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256

    • TLS_DH_anon_WITH_AES_128_CBC_SHA256

    • TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256

  • TLSv1 cipher suites:

    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

    • TLS_ECDH_anon_WITH_AES_256_CBC_SHA

    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

    • TLS_ECDH_anon_WITH_AES_128_CBC_SHA

    • TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

    • TLS_ECDHE_RSA_WITH_RC4_128_SHA

    • TLS_ECDH_anon_WITH_RC4_128_SHA

    • TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA

    • TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA

    • TLS_ECDHE_ECDSA_WITH_NULL_SHA

    • TLS_ECDHE_RSA_WITH_NULL_SHA

    • TLS_ECDH_anon_WITH_NULL_SHA

  • SSLv3 cipher suites:

    • TLS_RSA_WITH_AES_256_CBC_SHA

    • TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

    • TLS_RSA_WITH_AES_128_CBC_SHA

    • TLS_RSA_WITH_SEED_CBC_SHA

    • TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

    • TLS_RSA_WITH_RC4_128_SHA

    • TLS_RSA_WITH_RC4_128_MD5

    • TLS_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_RSA_WITH_NULL_SHA

    • TLS_RSA_WITH_NULL_MD5

    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA

    • TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA

    • TLS_DH_anon_WITH_AES_256_CBC_SHA

    • TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA

    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA

    • TLS_DHE_RSA_WITH_SEED_CBC_SHA

    • TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA

    • TLS_DH_anon_WITH_AES_128_CBC_SHA

    • TLS_DH_anon_WITH_SEED_CBC_SHA

    • TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA

    • TLS_DH_anon_WITH_RC4_128_MD5

    • SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA

    • TLS_DH_anon_WITH_3DES_EDE_CBC_SHA

Copyright © 2026 Musarubra US LLC | Privacy | Legal | AI Disclaimer