Technical Tip: VA Remedy for ssl-static-key-ciphers

The main cause of this type of vulnerability is the use of TLS1.0, which utilizes a 'Static Key Cipher'.

Although this is considered a 'low severity' vulnerability, it is always recommended to use TLS1.1 or above versions. It is advisable to disable older versions like SSLv3 and TLS 1.0 if they are enabled:

config system global
    set admin-https-ssl-banned-cipher SHA1 SHA256 SHA384
end