Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
bear
New Contributor

Remove weak SSL cipher suite for Fortigate 2000E v5.6

When security audit, SSL ciphers supported include DHE-RSA-AES128-SHA. AES-CBC-128 and SHA1 need to be removed. Can I use CLI set banned-cipher to remove weak SSL cipher suite?
1 REPLY 1
abarushka
Staff
Staff

Hello,

 

Can you please elaborate how the test was conducted (i.e. did you receive weak cipher suite while trying to access SSL VPN, FortiGate management, etc.)?

FortiGate
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors