TLS 1.1

[Daveclegg]

Good Morning, My customer is using a Fortigate to protect their web servers and we are using load balancing on the fortigate for this. They want to disable TLS 1.0 on the fortigate, can someone advise how i do this please? Thanks, Dave

[Carl_Wallmark]

Hi Dave, Could it be this you are looking for: ssl-cipher-suites The following are the variables for config ssl-cipher-suites, and are available only if type is server‑load-balance and ssl-algorithm is custom. cipher <cipher_name> Enter the cipher name. For a list of available ciphers, enter set cipher ? versions {ssl‑3.0 tls‑1.0 tls‑1.1} Enter the algorithm versions to support. ssl‑3.0 tls‑1.0 tls‑1.1 ------------------ You will find it under: config firewall vip edit <your vip>