Technical Tip: Disable TLS 1.0 and 1.1 in FortiWeb True transparent proxy

Description

This article describes how to disable TLS 1.0 and 1.1 in FortiWeb True transparent proxy.

By default, TLS 1.0 and TLS 1.1 are enabled on the FortiWeb true transparent proxy mode. As the FortiWeb true transparent proxy, the server policy will not have the advanced SSL setting to disable TLS 1.0 and TLS 1.1.

Scope

FortiWeb.

Solution

In a true transparent proxy, the setting of the SSL connection is in the server pool.

 

CLI commands:

 

config server-policy policy
    edit <policyname>
        set tls-v10 disable
        set tls-v11 disable
end