RE: Sophos SEC 5.5.1 - won't start if TLS 1.0 is disabled

Sean Davis — Mon, 31 Aug 2020 12:56:13 GMT

This helped me, thanks. But I found that the command fails unless I have explicitly enabled TLS 1.0. With that enabled, I successfully ran the command and saw the message: Encrypted connection to the SQL Server is established. Now that the connection config has been updated, I disabled TLS 1.0 but subsequent start of SQL Server fails again. So apparently, I have to leave 1.0 enabled in order for Sophos SQL to use 1.2...

It's great that Sophos will use TLS 1.2 but the point is to be able to disable TLS 1.0 and 1.1 altogether, right? Am I missing something else because this improves security of Sophos while still leaving my server vulnerable to TLS 1.0

RE: Sophos SEC 5.5.1 - won't start if TLS 1.0 is disabled

David Lewis1 — Tue, 19 Feb 2019 16:39:03 GMT

We were able to get the Sophos Enterprise Console to load with just TLS 1.2 enabled by doing the following:

C:\sec_551\serverinstaller\checkdbconnection> .\CheckDBConnection.exe -s <SQL Server> -t onfce -c –a (This –a flag tells the program to change the Db connection settings for Sophos).

Hope this helps someone in the Interwebs.

David