Skip to main content
MusicDudeNick
MusicDudeNick
New Member
June 28, 2019
Question

Fortigate Vulnerabilities Remediation

  • June 28, 2019
  • 1 reply
  • 2620 views

Greetings,

 

We have a customer who wishes us to disable SSLv3 and enable TLS on their FortiGate VM64 firewall. They also want us to reconfigure the SSLVPN to no longer use the EDH-RSA-DES-CBC3-SHA and DES-CBC3-SHA cipher suites. Is this possible? If so, how can one achieve this?

 

Thanks,

-Nick

    1 reply

    hubertzw
    hubertzw
    New Member
    June 29, 2019

    Hi 

    config vpn ssl settings
        set sslv3   {enable | disable}   sslv3
        set tlsv1-0 {enable | disable}   Enable/disable TLSv1.0.
        set tlsv1-1 {enable | disable}   Enable/disable TLSv1.1.
        set tlsv1-2 {enable | disable}   Enable/disable TLSv1.2.
    More details here: https://kb.fortinet.com/k....do?externalID=FD43679

    Terms & ConditionsAccessibility statement