Deactivate unnecessary ciphers

Forum|Forum|9 years ago
November 15, 2016
1 reply
4128 views

Hello,

It it possible to deactivate from a FortiGate the unnecessary ciphers? For example, if the preferred ciphers are AES-256, AES-192, is it possible to deactivate all the others?

This requirements is coming from an external consultant who did an audit to our FortiGates and suggested this as security hardening.

Thanks

Andreas

aagrafiAuthor

New Member

config vpn ssl settings set algorithm <cipher_suite> end

where one of the following variables replaces <cipher_suite>: low Use any cipher suite; AES, 3DES, RC4, or DES. medium Use a 128-bit or greater cipher suite; AES, 3DES, or RC4. high Use a ciper suite grather than 128 bits; AES or 3DES.

Sign up

Login with SSO

Login to the community

Login with SSO