Skip to main content
FortiKoala
Staff
FortiKoala
Staff
October 10, 2018

Technical Note: Disable TLS 1 and TLS 1.1 for the Persistent Agent

  • October 10, 2018
  • 0 replies
  • 2812 views

Description

This article provides the steps to disable TLS 1 and TLS 1.1 for the Persistent Agent.
 
Important:  Review agent versions distributed on the network before modifying TLS.  Otherwise, agents still using TLS 1.0 and 1.1 will stop communicating with the server.  For information on the most recent agent versions and support, refer to the Release Matrix and Agent release notes in the Fortinet Document Library.
 
Windows
Agent 3.3+ use TLS 1.0,1.1, or 1.2

Linux
Agent 3.3+ use TLS 1.0,1.1, or 1.2

MacOS
Agent 3.3,3.4,3.5 can use TLS 1.0
Agent 4.0+ can use TLS 1.1 or 1.2
 
 
Agents 3.0-3.2 use only SSLv3


Scope
Version: 8.2 and above

Solution

1.  In the Administration UI, navigate to System > Settings > Persistent Agent > Transport Configuration.
2.  Under TLS Service Configurations, highlight Default TCP entry and select Modify.
3.  Uncheck Automatically Update Ciphers and Protocols on Upgrade.
4.  Click the drill-down for TLS Protocols.  Click the protocol desired to be added or removed.  The field will update.
5.  Click the Modify TLS Service Configuration Box to collapse the drill-down.
6.  Click OK.

 

Related Articles

Technical Tip: Disable TLS 1 and TLS 1.1 for the Admin UI on port 8443

Technical Tip: Disable TLS 1 and TLS 1.1 for captive portal port 443

Terms & ConditionsAccessibility statement