TMAegisBeta
More rules for aruba-cx

HPE Aruba CX

TMA-ARUBA-CX-1.6.2

TLS Minimum Version

HighLevel 2Manual reviewaruba-cx

Description

The switch supports TLS version 1.2 and 1.3 and secure cipher suites for each TLS version supported.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Run 'show tls global' and confirm 'Minimum TLS version' is 1.2 (or 1.3) and that only strong cipher suites are allowed.

How it is fixed

Fix method: Guidance or infrastructure patch

AOS-CX supports only TLS 1.2 and 1.3; keep the minimum TLS version at 1.2 or higher and allow only strong cipher suites (see 'show tls global').

Properties

Operating systems
Any
Tags
aruba-cxcrypto
Reference
CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.6.2 TLS Minimum Version