FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article discusses VA Remedy for ssl-static-key-ciphers.
Scope
FortiGate.
Solution
The main cause of this type of vulnerability is the use of TLS1.0, which utilizes a 'Static Key Cipher'.
Although this is considered a 'low severity' vulnerability, it is always recommended to use TLS1.1 or above versions. It is advisable to disable older versions like SSLv3 and TLS 1.0 if they are enabled:
config system global set admin-https-ssl-banned-cipher SHA1 SHA256 SHA384 end
