This Tech-Tip desribes how FortiSwitch OS up till 7.4.0, can have issues with TLS 1.3. This is still an issue with 7.4.2! How come, this is a problem with latest browser versions, like Chrome & Firefox? Are FortiSwitches telling it supports TLS 1.3, but in reality, it dosen't?

Jakob-AHHG

Explorer III

Solved

FortiSwitch: Forbidden....Reason: Cannot perform Post-Handshake Authentication.

Forum|Forum|2 years ago
January 17, 2024
5 replies
5865 views

This Tech-Tip desribes how FortiSwitch OS up till 7.4.0, can have issues with TLS 1.3.

This is still an issue with 7.4.2!
How come, this is a problem with latest browser versions, like Chrome & Firefox?

Are FortiSwitches telling it supports TLS 1.3, but in reality, it dosen't?

FortiSwitch

Best answer by hbac

@Jakob-AHHG,

As of now, we have no plan to change anything on switch side as it's a browser side issue. Safari is working fine. For Firefox, it is possible to fix it in 'about:config', and set 'security.tls.enable_post_handshake_auth' to 'true'.

Regards,

Jakob-AHHGAuthor

Explorer III

Note: This does not seem to be an issue on Mac OS X's Safari..

hbac

Staff

Hi @Jakob-AHHG,

The article you provided is for FortiSwitch OS 7.4.0 or above which includes 7.4.2. Did you follow suggestions provided in the article?

Regards,

Jakob-AHHGAuthor

Explorer III

Ahh, my bad!

Yeah, just did that on a switch.. but why would I like to not use TLS1.3 ?!?
If I had old browser, I could understand..

Please fix! I do not want to have to apply this security downgrade to 100 switches!

hbacAnswer

Staff

@Jakob-AHHG,

As of now, we have no plan to change anything on switch side as it's a browser side issue. Safari is working fine. For Firefox, it is possible to fix it in 'about:config', and set 'security.tls.enable_post_handshake_auth' to 'true'.

Regards,

Sign up

Login with SSO

Login to the community

Login with SSO