Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions SSL Medium Strength Cipher Suites Supported CBC mode Enabled

Sophos Firewall requires membership for participation - click to join

Thread Info

State Suggested Answer
Replies 5 replies
Answers 1 answer
Subscribers 39 subscribers
Views 122 views
Users 0 members are here

Options

Suggested

SSL Medium Strength Cipher Suites Supported CBC mode Enabled

Akash 2 hours ago

How i can disable CBC mode and chacha20 affected algorithms and enable CTR or GCM cipher mode encryption.

Added TAGs
[edited by: Raphael Alganes at 1:11 PM (GMT -8) on 8 Nov 2024]

Parents

0 LuCar Toni 2 hours ago

For what kind of Facilities do you need this?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Akash 2 hours ago in reply to LuCar Toni

i have scanned my sophos firewall i got this vulnerability "SSL Medium Strength Cipher Suites Supported CBC mode Enabled"
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 2 hours ago in reply to Akash

On which port / facility ?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Akash 2 hours ago in reply to LuCar Toni

port 8090
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 2 hours ago in reply to Akash

You need to disable it like this:
https://support.sophos.com/support/s/article/KBA-000009836?language=en_US
https://docs.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/CommandLineHelp/DeviceConsole/Set/index.html#http_proxy

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel

Reply

0 LuCar Toni 2 hours ago in reply to Akash

You need to disable it like this:
https://support.sophos.com/support/s/article/KBA-000009836?language=en_US
https://docs.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/CommandLineHelp/DeviceConsole/Set/index.html#http_proxy

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel

Children

No Data