Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
511
Views
0
Helpful
1
Replies

FWSM and SSL

rpsrekhi3
Level 1
Level 1

‎05-22-2007 05:45 PM

How to configure the FWSM so that it only supports SSL 3.0 and not SSL 2.0 which has many security vulnerabilities.

I guess FWSM/PIX/ASA supports SSL/TLS.

Thanks.

Labels:
0 Helpful
1 Reply 1

Jon Marshall
Hall of Fame
Hall of Fame

‎05-22-2007 10:39 PM

Hi

As far as i know you can't do this on the FWSM. SSL v3.0 and SSL v2.0 will both use port 443 and that is the only control you have on the FWSM. There is no "fixup" specifically for HTTPS which means the FWSM does not have an any application aware code for the version of https being used.

Basicaly you need to ensure that you are not running v2.0 SSL on any of your servers if you are concerned with the security vulnerabilities.

HTH

Jon

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents