Question
strong-crypto command and SSL v2 or a Policy to block this connection ?
Hi I am looking to block SSL v2 traffic towards my dmz servers on the Wan port on the fortigate. I would like to know whether a using the command strong-crypto will achieve this.
from the below KB I can see that : http://kb.fortinet.com/kb/documentLink.do?externalID=FD36915
Cryptographic protocols SSLv3 and TLSv1.0 will not be offered by the FortiGate when 'strong-crypto' is enabled.
Cryptographic protocols TLSv1.1 and TLSv1.2 will be offered by the FortiGate when 'strong-crypto' is enabled.
Can someone advise a way to block ssl v2 connection on the firewall
