How to disable TLS v1.0 for port 8443 on Expressway (MRA)

[anthony.smith]

Expressway (MRA) v X12.5.7

Based on a request from our security department, we need to disable TLS v1.0 for MRA on our Expressways. We were able to disable TLS v1.0 globally -- but it still looks like that applies only to SIP but not to MRA. We can see that TLS v1.0 on port 8443 is still accessible from an external scan of the Expressway; but internal scans are showing that TLS v1.0 is disabled over SIP.

[Michael Rubin]

Log in to to Expressway C & E component s-> selected Maintenance -> Security -> Ciphers, changed on all interfaces ( i.e Forward PRoxy, HTTPS, Revers proxy, SIP,UC server discovery & XMPP) from minimum TLS 1.0 to minimum TLS 1.2 version & saved it.

REBOOT