Block older SSL and TLS versions

CaoCấp 1Xem xét thủ côngcisco-ftd

Mô tả

Transport Layer Protocol or TLS utilities cryptography to encrypt web traffic. Firepower Threat Defense can block older TLS and SSL version to help protect the network from compromise. It is recommended that you move to TLS 1.3 for your enterprise. By using TLS 1.3 you can enhance the security and performance of you network communications while maintaining privacy and complying with modern standards. Not reliably checkable from an exported configuration. Reported as SKIP with review instructions.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

Not reliably checkable from an exported configuration. Policies > Access Control > SSL Ensure that a rule exists blocking older versions of SSL and TLS.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Policies > Access Control > SSL 1. Click add rule 2. In the _Name_ field enter a name for the rule 3. From the _Action_ list select Block or Block with reset 4. Click _Version_ 5. Select older versions of TLS 6. Save Rule Because this is a specific rule, order it earlier in your policy than more general rules such as application-matching rules.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: cisco-ftdnetworkhardening
Tham chiếu: CIS Cisco Firepower Threat Defense Benchmark v1.0.0 - 3.2.2 Block older SSL and TLS versions