Disable TLS 1.1 on UTM

Hi Obi-Wan 

If this scan picked up TLS 1.1 for email protection, it is possible to change the TLS version from the GUI. 

Please navigate to Email Protection > SMTP > Advanced > TLS Settings, you should be able to change TLS version, but ensure you read on the page before making this change.

Thanks,

Hi ,

Thank you for the response, but i do no think it is only for SMTP, it did not specify for SMTP, it might be for the webadmin, is there a way to disable TLS 1.1 and lower without modifying the server?

Thanks

Hi and welcome to the UTM Community!

What version are you on? If below 9.702, apply that Up2Date (DO NOT APPLY 9.703!) and then tell us if you're still seeing TLS 1.1.  Can you tell which port was being scanned when TLSv1.1 was seen?

Cheers - Bob

Hello Bob,

Current installed  version is 9.702-1. It was pointing to port 443, I saw the release notes of 703-1 mentioned support for TLS 1.2, would that solve this you think?

Thanks

Possibly, but don't install it: https://community.sophos.com/products/unified-threat-management/f/general-discussion/119695/do-not-install-9-703/

Cheers - Bob

Wew thank you for the heads up!