FortiOS 5.2.8 Supporting TLS 1.2 for SSL Offfloading

[AndreaSoliva]

Hi all

good news for everyone which uses SSL Offloading with Virtual Server.

FortiOS 5.2.8 is supporting new TLS 1.2 which was until now not the case and which is only the case under FortiOS 5.4

All devices which are able to use SSL Offloading (consult software matrix) have under FortiOS 5.2.8 this possibility.

# get system status | grep Version

Version: FortiGate-300D v5.2.8,build0727,160629 (GA)

# config firewall vip

(vip) # edit test

new entry 'test' added

(test) # set type server-load-balance

(test) # set server-type https

(test) # set ssl-min-version

ssl-3.0 SSL 3.0.

tls-1.0 TLS 1.0.

tls-1.1 TLS 1.1.

tls-1.2 TLS 1.2.

hope this helps

have fun

Andrea

[AndreaSoliva · Accepted solution]

By the way forgot completely...do not look for any entry in Release Notes or whatever you will not find anything because it is mentioned nowhere. On Request why they did not note it in Release Notes Fortinet has given back as answer (original answer):

".........

the number of fixed issues is exceeding the length of release note's pages for which reason only few of them are mentioned........"

from my site....."no coment"

have fun

Andrea

[mcsecisco]

I have question , how SSL/TLS will work in VDOM, Do we need individual certificate in each VDOM.?