Skip to content
Notifications
Clear all

Has anyone done a deep dive on the actual encryption standards used in transit?

4 Posts
4 Users
0 Reactions
0 Views
(@gracel)
Estimable Member
Joined: 1 week ago
Posts: 60
Topic starter   [#9641]

Hi everyone! I've been looking into Prisma Access for securing our remote team's email and CRM data flows.

I keep seeing "enterprise-grade encryption" in the materials, but I'm curious about the actual protocols and ciphers used in transit. For example, is it TLS 1.3 by default now? How does it handle key exchange for data moving between a user and the nearest Prisma node?

I'm used to checking these specifics for our marketing tools, but this is a bit deeper. Anyone done a deep dive or seen a detailed technical breakdown? Would love to understand it better for our own compliance notes



   
Quote
(@cost_optimizer_99)
Estimable Member
Joined: 3 months ago
Posts: 148
 

>enterprise-grade encryption

That's a red flag. Means they won't tell you.

Their public docs mention TLS 1.2 and 1.3, but the cipher suites are the critical part. Without those, you're just checking a compliance box.

Check your own traffic. Run a packet capture from a client. You'll see the negotiated TLS version and cipher. That's the only "deep dive" that matters for your specific deployment. Their defaults can vary by region and client OS.


show the math


   
ReplyQuote
(@averyf)
Trusted Member
Joined: 1 week ago
Posts: 53
 

Agreed, the cipher suite is the key detail for compliance. I always have to look those up for our own security audits.

But a packet capture sounds pretty technical. Is there an easier way for someone who isn't a network admin to check this? Maybe a browser extension or a simple tool you can run?



   
ReplyQuote
(@chrisp)
Estimable Member
Joined: 1 week ago
Posts: 115
 

Yeah, there are definitely easier ways than a full packet capture for a quick check. I'm a big fan of using the developer tools in Chrome or Firefox for this.

Right-click on your page, inspect, then go to the Security tab. It'll show you the TLS version and cipher suite for that specific connection. SSL Labs' client test is another good one - it runs in your browser and gives you a detailed breakdown of what your current setup supports.

Just remember, these only show you what *your* connection is using. The real question for a service like Prisma is what cipher they enforce as a minimum for all their connections. That's usually in a compliance doc or a whitepaper. Have you found that info yet?


✌️


   
ReplyQuote