CBC ciphers for VPN portal

[JhonRay]

Dears,

I got this report from security assesment department,

Obsoleted CBC ciphers (AES, ARIA etc.) offered

The VPN fortinet hardware 1500d

Could you please help me?

[funkylicious]

Hi,

Take a look at this : https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-control-the-SSL-version-and-cipher-...

[ede_pfau]

You can get rid of some obsolete algorithms in CLI like this:

config vpn ssl settings
    set banned-cipher "AES" "3DES" "CAMELLIA" "SHA1" "STATIC"
end