R81.20 Management Cipher Suites

[Simon_Macpherso]

Hello,

Can additional ciphers suites be added to Gaia OS?

I require a cipher with  AES-CBC with 256-bit key length, SHA2-256, PSK auth. 

Listing all ciphers except ones with no encryption (eNULL) or no authentication (aNULL), i can't see one that matches these attributes. 

Cipher PSK-AES256-CBC-SHA1 is in the list, but not PSK-AES256-CBC-SHA256.

Regards,

Simon

[G_W_Albrecht]

Additional cipher suites need RFE.

[PhoneBoy]

For what precise function are you requiring this cipher?
In general, this would require an RFE with your local Check Point office.

Looking at R81.20, it appears we have support for PSK-AES256-CBC-SHA384 (at least according to cpopenssl ciphers).
It's not something that you can enable/disable via cipher_util, though.