Description

Even though TLS1.0 and 1.1 have been disabled for the JWeb GUI, the firewall authentication still allows those old TLS versions to be used.

Symptoms

When running security audits, it may be found that resources behind firewall authentication will be presented with a login page that allows TLS1.0.

Solution

The TLS versions for firewall authentication can be restricted within the ssl termination profile.

 

When this is configured, only what is configured will be allowed.

 

set services ssl termination profile <profile-name> protocol-version tls13

Modification History

2024-11-26 : Article Created