Web Server Security UTM WAF fail PCI check DH-2048

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 5 replies
Subscribers 3 subscribers
Views 2986 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM WAF fail PCI check DH-2048

twister5800 over 4 years ago

Hi all,

During PCI check, when going through WAF, we are getting that it fails Diffie-Hellmann 2048 check.

DNAT to the server, makes all "green"

Have told WAF to run TLS 1.2, but nothing helps, any suggestions? :-)

This thread was automatically locked due to age.

Parents

0 emmosophos over 4 years ago

Hello Twiter5800,

Can you share the PCI to understand what exactly it is failing against. You can send me by PM if you want.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 twister5800 over 4 years ago in reply to emmosophos

Hi Emmo,

PM sent! :-)

-----

Best regards
Martin

Sophos XGS 2100 @ Home | Sophos v20 Technician
Cancel
Vote Up 0 Vote Down

Cancel
0 emmosophos over 4 years ago in reply to twister5800

Hello Twister,

Thank you, I have replied to your PM.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 emmosophos over 4 years ago in reply to twister5800

Hello Twister,

Thank you, I have replied to your PM.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 RemoHehlert over 4 years ago in reply to emmosophos

Hi @all,

so is there anything about that what we can do better or is that one solve by using TLS 1.2?

many thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 twister5800 over 4 years ago in reply to RemoHehlert

Still waiting for GES team :-) Will report back :-)

-----

Best regards
Martin

Sophos XGS 2100 @ Home | Sophos v20 Technician
Cancel
Vote Up 0 Vote Down

Cancel