Description This article covers a specific scenario where, due to a PFS
mismatch, an IKEv2 tunnel will result in a tunnel flap at each IPSec
rekey even though it comes up initially. Scope FortiGate, IPSec tunnel,
IKEv2, PFS. Solution In contrast to I...
Description This article addresses how to disable AES CBC ciphers for
SSL VPN. Scope FortiGate, SSL VPN, CBC (Cipher-Block-Chaining). Solution
As vulnerability scanners are starting to report AES CBC ciphers as
weak, it may be required to remove AES ...
