Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 5 subscribers
  • Views 4985 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PCI Scan still failing on TLS1

SteveGross

I'm still failing my PCI scans because of TLS 1.0.  I've read the forums and looked at patching the various *.conf file, but none of them contain the dreaded +TLSv1 or anything like it.

So is there a way to block all TLS 1.0 at the UTM or not?



This thread was automatically locked due to age.
Parents
  • 0

    I'm with Doug, Steve.  I try to get my customers to try companies that another client hasn't yet tried, but, so far, they just run an automated test and then automatically send a canned report that shows the results.  No one at the scanning company looks at the report.  The companies have no mechanism to mark specific "fails" as false positives.  There is likely no one at the company that could explain anything on the test to you.  You need to document your proof to them and then review the next report to see if anything needs to be added to your document before you send it to them with the notation that you're looking for a company with better systems.

    If anyone has a good suggestion, please PM me the company name and the name of the product of theirs that you're using.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    We use Trustwave.  They have a process for appealing issues.   Once an appeal is approved, it is retained for future scans.   I have not won every appeal, but overall I am satisfied with their producit.

Reply Children
No Data
Unfiltered HTML