Skip to main content
f2480126
New Member
January 14, 2025
Question

SSL Deep Inspection Flow-based mode will not support TLS1.3

  • January 14, 2025
  • 2 replies
  • 1705 views

We encountered an issue where we needed to enable SSL protection on our internal web server to provide connections for external visitors. After enabling SSL protection, the browser displayed ERR_CONNECTION_RESET. When checking with openssl s_client -connect, we found that TLS1.3 was not supported, but TLS1.2 was supported. We also confirmed that the backend server originally supported TLS1.3, but when we switched the firewall mode to proxy mode, it could support TLS1.3 and the browser could access the website normally.

2 replies

AEK
SuperUser
SuperUser
January 14, 2025

Which FOS version?

AEK
f2480126
f2480126Author
New Member
January 14, 2025

7.2.10

srajeswaran
Staff
Staff
January 14, 2025

are you using a self signed certificate for the internal web server?

f2480126
f2480126Author
New Member
January 14, 2025

yes,My default web server will use a self-signed certificate, only the domain application uses a CA certificate.