Tenable Vulnerability report on fortigate device

[ahmedfathy9414]

Dears 

Appreciate your support to advise with the needed co to solve below issues:

High	121010	TLS Version 1.1 Protocol Detection
High	17367	Fortinet FortiGate Web Console Management Detection
Medium	157288	TLS Version 1.1 Deprecated Protocol
Medium	187315	SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795)
Medium	51192	SSL Certificate Cannot Be Trusted
Medium	57582	SSL Self-Signed Certificate
Low	153953	SSH Weak Key Exchange Algorithms Enabled
Low	10114	ICMP Timestamp Request Remote Date Disclosure

[jiahoong112]

what version of FortiOS are you using?

[ahmedfathy9414]

The following instance of FortiOS Web Interface was detected on the remote host :
  Version : >= 5.4

[Debbie_FTNT]

Can you provide a precise firmware version?

5.4 was initially released in 2016, and anything below version 7.0 is essentially out of support by now (with 7.0 itself being out of support end of September) so if you are on any version between 5.4 and 7.0, I would recommend an upgrade to a supported version and then re-running the scan.

Cheers,

Debbie

[jiahoong112 · Accepted solution]

FortiOS 5.4 has been End of Support for a long time now. I highly suggest upgrading to the more recent FortiOS versions like 7.2.11/12, 7.4.8, 7.6.4 and run the scan again. 
Upon upgrading to the newer versions, you can use features like ACME to generate a 3rd party signed certificate to use it for Administrative Access so that the 'Self-Signed certificate' warning won't come up on your vulnerability scan.

https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/822087/automatically-provisi... 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Recommended-Release-for-FortiOS/ta-p/22717... 

[ahmedfathy9414]

Thanks all for your support