The example below is to disable the TLS v1.0 on FortiMail. It will disable the TLS v1.0 for the HTTPS and SMTP access to FortiMail.
Run the CLI command below to disable the TLS v1.0:
config system global set ssl-versions tls1_1 tls1_2 tls1_3
end
Note:
If there is any sender that can only support TLS v1.0, the sender may encounter issues sending email to FortiMail or will need to send mail using plain text.
TLS Versions 1.0 and 1.1 are officially deprecated protocols that are considered to be insecure. It is therefore highly recommended to disable them.
Before making these changes, make sure the SSL version and ciphers used by clients are supported. Removing some of the older ciphers and SSL versions may affect client versions.
