Description
This article describes how to block lower TLS versions for pass-through traffic.
Solution
It is possible to block lower TLS versions TLS 1.0 & 1.1 version for pass-through traffic using application control profile.
- Enabling application profile.
- Select the application Overrides signature by selecting '+ Create New'.
- Then, Select the 'SSL_TLSv1.0 and SSL_TLSv1.1' signature, select 'Ok', and set the action to 'Block'.
- Use this application profile in the IPv4 policy to block TLS 1.0 & 1.1 Version traffic.
- Make sure to use 'Proxy-based' Inspection Mode otherwise, it won't work.
Go to Log & report -> Application Control -> Check Logs.
Related articles:
