Skip to main content
shabir_61
New Member
May 29, 2021
Question

SSL.Anonymous.Ciphers.Negotiation

  • May 29, 2021
  • 3 replies
  • 14768 views

Dear All,  Hope you are doing all well . i am getting below syslog alert message every second . This is happening from LAN to WAN .i just want to know what is causing the issue and how i can disable SSL.Anonymous.Ciphers.Negotiation in firewall .Moreover we are not using any kind of VPN in the firewall . Please help me to fix this issue .     srcintf="Trust" srcintfrole="lan" dstintf="wan1" dstintfrole="wan" sessionid=86607577 action="dropped" proto=6 service="SSL" policyid=1 attack="SSL.Anonymous.Ciphers.Negotiation" srcport=37289 dstport=443 url="/" direction="outgoing" attackid=43544 profile="default" ref="http://www.fortinet.com/ids/VID43544" incidentserialno=218800803 msg="applications3: SSL.Anonymous.Ciphers.Negotiation,"

    3 replies

    Duncan
    New Member
    May 31, 2021

    Yeah, I got this. In our case it was Microsoft Teams. I disabled the IPS signature.

    [link]https://forum.fortinet.com/tm.aspx?m=188005[/link]

    shabir_61
    shabir_61Author
    New Member
    May 31, 2021

    SSL.Anonymous.Ciphers.Negotiation

    Dear All,  Hope you are doing all well . i am getting below syslog alert message every second . This is happening from LAN to WAN .i just want to know what is causing the issue and how i can disable SSL.Anonymous.Ciphers.Negotiation in firewall .Moreover we are not using any kind of VPN in the firewall . Please help me to fix this issue .     srcintf="Trust" srcintfrole="lan" dstintf="wan1" dstintfrole="wan" sessionid=86607577 action="dropped" proto=6 service="SSL" policyid=1 attack="SSL.Anonymous.Ciphers.Negotiation" srcport=37289 dstport=443 url="/" direction="outgoing" attackid=43544 profile="default" ref="http://www.fortinet.com/ids/VID43544" incidentserialno=218800803 msg="applications3: SSL.Anonymous.Ciphers.Negotiation,"

    shabir_61
    shabir_61Author
    New Member
    June 1, 2021

    Dear All,

     

    I just want to know how and where to disable this in Fortinet Firewall 101F.  Please find attached snap shot and  help me to resolve this issue .

     

    Thank you,

     

     

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!