Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 23 replies
  • Answers 1 answer
  • Subscribers 4 subscribers
  • Views 40909 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WebAdmin and user portal TLS v1.0

noregrets
I ran an external compliance scan on our network and received a notification that the the ports/services that handle the WebAdmin login and user portal for our UTM 220 accept TLS v1.0, which causes the scan to fail.  Is there any way I can disable v1.0?  I read a couple posts about manually updating the system for Heartbleed and TLS for SMTP, but I thought those methods might be outdated by now or not to applicable to this case.

The UTM 220 is at version 9.310-11.

thanks!


This thread was automatically locked due to age.
Parents
  • 0
    Just wanted to mention that I had to do this again because a firmware update undid the changes to the conf files.  I also had to add the SSLProtocol parameter mentioned in my prior post to /var/sec/chroot-httpd/etc/httpd/vhost/httpd-webadmin.conf

    In both conf files, I added it after the line containing the SSLCACertificateFile parameter.
Reply
  • 0
    Just wanted to mention that I had to do this again because a firmware update undid the changes to the conf files.  I also had to add the SSLProtocol parameter mentioned in my prior post to /var/sec/chroot-httpd/etc/httpd/vhost/httpd-webadmin.conf

    In both conf files, I added it after the line containing the SSLCACertificateFile parameter.
Children
No Data
Unfiltered HTML