Need to block SSL version 3

[Ramesh_M]

Hi Team,

Kindly help me to block sslv3 in FortiOS 5.

Regards / Ramesh M

[b_row]

Paul, Yes, but in this case with windows XP FortiClient SSLVPN  only work with SSL2, SSL3 or TLS 1.0; Follow windows 7 supported screen without these options in active FortiClient SSLVPN connects not using TLS 1.1 and 1.2; Hope this helps

[emnoc]

I just notice you said "Windows XP". Why are you using an outdated unsupported OS? I doubt  FTNT will lift a finger trying to make this work and support newer support  SSL protocols . Just move to something supported and get away from  XP imho.

[emnoc]

Q:

So if  FC is dependent on the IE browser settings, what happens if your remove the IE browser component?

[jaustgen]

I don't know.

[Paul_S]

emnoc wrote:

Q:

So if  FC is dependent on the IE browser settings, what happens if your remove the IE browser component?

IE only lets you control the major SSL/TLS options. to control SSL/TLS with or without IE, you must use the registry.

How to restrict the use of certain cryptographic algorithms and protocols in Schannel.dll [link]https://support.microsoft.com/en-us/kb/245030[/link]

[Ameer]

Refer This

http://www.fortiguard.com...POODLE--Vulnerability/