Supported TLS Cipher Suites for Cato TLS Inspection

This article lists the TLS cipher suites that are currently supported for accounts that enable TLS inspection. DSS is not supported.

These are the supported TLS cipher suites:

• ECDHE-ECDSA-CHACHA20-POLY1305
• ECDHE-RSA-CHACHA20-POLY1305
• ECDHE-ECDSA-AES128-GCM-SHA256
• ECDHE-RSA-AES128-GCM-SHA256
• ECDHE-ECDSA-AES256-GCM-SHA384
• ECDHE-RSA-AES256-GCM-SHA384
• DHE-RSA-AES128-GCM-SHA256
• DHE-RSA-AES256-GCM-SHA384
• ECDHE-ECDSA-AES128-SHA256
• ECDHE-RSA-AES128-SHA256
• ECDHE-ECDSA-AES128-SHA
• ECDHE-RSA-AES256-SHA384
• ECDHE-RSA-AES128-SHA
• ECDHE-ECDSA-AES256-SHA384
• ECDHE-ECDSA-AES256-SHA
• ECDHE-RSA-AES256-SHA
• DHE-RSA-AES128-SHA256
• DHE-RSA-AES128-SHA
• DHE-RSA-AES256-SHA256
• DHE-RSA-AES256-SHA
• ECDHE-ECDSA-DES-CBC3-SHA
• ECDHE-RSA-DES-CBC3-SHA
• EDH-RSA-DES-CBC3-SHA
• AES128-GCM-SHA256
• AES256-GCM-SHA384
• AES128-SHA256
• AES256-SHA256
• AES128-SHA
• AES256-SHA
• DES-CBC3-SHA