SSL Proxy connecting via TLS1.0

[tputterman]

I am running Webfiltering with SSL in Proxy mode using version 5.07.

This website verifies what version of SSL or TLS you are connecting to it with.

https://www.howsmyssl.com/

When I connect through the SSL proxy the site is telling me that I am connecting via TLS1.0.

If I add this site to bypass the SSL proxy Chrome is saying TLS1.2

I am assuming since we are using the SSL proxy that the website is detecting the Fortigate connection to the site and for some reason it is negotiating to TLS 1.0.

If my assumptions are correct, is there any way to change the priority on the Fortigate so that it attempts TLS1.2 first, rather than using outdated Encryption.

Thanks

Greg

I have opened a ticket with support and will update when I have an answer.

Update from Fortigate Support

"FortiOS 5.0.x does not support TLS 1.2 for SSL inspection. There are no config options that can be changed to support this version.

FortiOS 5.2.x does appear to support TLS 1.2 for SSL inspection by default."