This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Disable TLS 1.1 on UTM

Hello,

When running a scan with nessus, there were errors thrown regarding the usage of unsecure TLS 1.1, I was going to disable it from the server manually, but is it possible to do it from the UI? Will there be an update to disable the depreciated versions?

Thanks!

This thread was automatically locked due to age.

Parents

0 FormerMember over 4 years ago

Hi Obi-Wan

If this scan picked up TLS 1.1 for email protection, it is possible to change the TLS version from the GUI.

Please navigate to Email Protection > SMTP > Advanced > TLS Settings, you should be able to change TLS version, but ensure you read on the page before making this change.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Obi-Wan over 4 years ago in reply to FormerMember

Hi ,

Thank you for the response, but i do no think it is only for SMTP, it did not specify for SMTP, it might be for the webadmin, is there a way to disable TLS 1.1 and lower without modifying the server?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 4 years ago in reply to Obi-Wan

Hi and welcome to the UTM Community!

What version are you on? If below 9.702, apply that Up2Date (DO NOT APPLY 9.703!) and then tell us if you're still seeing TLS 1.1. Can you tell which port was being scanned when TLSv1.1 was seen?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Obi-Wan over 4 years ago in reply to BAlfson

Hello Bob,

Current installed version is 9.702-1. It was pointing to port 443, I saw the release notes of 703-1 mentioned support for TLS 1.2, would that solve this you think?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 4 years ago in reply to Obi-Wan

Possibly, but don't install it: https://community.sophos.com/products/unified-threat-management/f/general-discussion/119695/do-not-install-9-703/

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Obi-Wan over 4 years ago in reply to BAlfson

Wew thank you for the heads up!
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Obi-Wan over 4 years ago in reply to BAlfson

Wew thank you for the heads up!
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data