Skip to main content
Spartacus1988
New Member
March 7, 2016
Question

strong-crypto command and SSL v2 or a Policy to block this connection ?

  • March 7, 2016
  • 0 replies
  • 2492 views

Hi I am looking to block SSL v2 traffic towards my dmz servers on the Wan port on the fortigate. I would like to know whether a using the command strong-crypto will achieve this. 

 

from the below KB I can see that  : http://kb.fortinet.com/kb/documentLink.do?externalID=FD36915

 

Cryptographic protocols SSLv3 and TLSv1.0 will not be offered by the FortiGate when 'strong-crypto' is enabled.

Cryptographic protocols TLSv1.1 and TLSv1.2 will be offered by the FortiGate when 'strong-crypto' is enabled.

 

 

 

Can someone advise a way to block ssl v2 connection on the firewall 

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.