topic How to close vulnerability "TSLv1 weak encryption algorithm in FTD". in Network Security

How to close vulnerability "TSLv1 weak encryption algorithm in FTD".

mumbai.support — Wed, 03 Mar 2021 10:04:59 GMT

We have found TSLv1 weak encryption algorithm in FTD in audit and they suggest mitigate it with latest TSLv. But in present we can see only TSLv1.2 is available with in FMC, both FMC and FTD version 6.4.0.7.

Is it close once we upgrade it with TSLv1.2 and Does it any impact?

Re: How to close vulnerability "TSLv1 weak encryption algorithm in FTD".

Rob Ingram — Wed, 03 Mar 2021 10:12:49 GMT

Hi @mumbai.support

You should be fine disabling older versions of TLS and just using TLS 1.2, most modern supported operating systems supports TLS 1.2.

Refer to this guide for more information about TLS on FTD.

Bear in mind if you are using Remote Access VPN and want to use DTLS 1.2 then you need to upgrade to FMC/FTD 6.6.

HTH

Re: How to close vulnerability "TSLv1 weak encryption algorithm in FTD".

mumbai.support — Sat, 06 Mar 2021 04:51:31 GMT

Hi Rob Ingram,

Thank You...!

If I change it from 1.0 to 1.2 then does it any impact in remote VPN CISCO AnyConnect?

Re: How to close vulnerability "TSLv1 weak encryption algorithm in FTD".

Rob Ingram — Sat, 06 Mar 2021 07:14:56 GMT

@mumbai.support

Yes it does, if you are using TLS protocol.

Most modern operating systems should support TLS 1.2.

The guide shows you how to make the changes and test.

HTH

Re: How to close vulnerability "TSLv1 weak encryption algorithm in FTD".

SurajS — Wed, 07 Apr 2021 04:43:18 GMT

Thank You...! It is working.