Skip to main content
JhonRay
JhonRay
New Member
December 10, 2023
Question

CBC ciphers for VPN portal

  • December 10, 2023
  • 2 replies
  • 1317 views

Dears,

 

I got this report from security assesment department,

 

Obsoleted CBC ciphers (AES, ARIA etc.) offered

 

CBC cipher.jpg

The VPN fortinet hardware 1500d

Could you please help me?

2 replies

funkylicious
SuperUser
funkylicious
SuperUser
December 10, 2023

Hi,

Take a look at this : https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-control-the-SSL-version-and-cipher-suite/ta-p/191437

"jack of all trades, master of none"
ede_pfau
SuperUser
ede_pfau
SuperUser
December 10, 2023

You can get rid of some obsolete algorithms in CLI like this:

config vpn ssl settings     set banned-cipher "AES" "3DES" "CAMELLIA" "SHA1" "STATIC" end
Terms & ConditionsAccessibility statement
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!