Technical Tip: Disable TLS 1.0 and 1.1 in FortiWeb Reverse Proxy mode

[yitoo_FTNT]

Description

This article describes how to disable TLS 1.0 and TLS 1.1 in reverse proxy mode.

Scope

FortiWeb.

Solution

In a Reverse Proxy, it is possible to disable TLS 1.0 and TLS 1.1 in the server policy and Server pool.

To disable TLS 1.0 and TLS 1.1 in the server policy, follow these steps:

1. Go to Server-policy -> Advanced SSL setting -> SSL connection settings.
2. Disable TLS 1.0 and 1.1.
   
   

To disable TLS 1.0 and TLS 1.1 in the Server -> Server pool, follow these steps:

1. Select the Server pool for which it is desired to disable TLS 1.0 and TLS 1.1.
2. Edit the Server-pool rule.
3. Under Advanced SSL setting -> SSL connection settings, disable TLS 1.0 and 1.1. This setting is only visible when enabling SSL in the server pool.
                                                                     

From CLI:

config server-policy policy

    edit <Policy name>

        set tls-v10 disable

        set tls-v11 disable

        end