topic Re: Disable SSLv3/TLSv1 in General Topics

Disable SSLv3/TLSv1

SDorsey — Thu, 14 Aug 2014 00:38:26 GMT

Is it possible to disable SSLv3 and TLSv1 for Global Protect?

Vulnerability scanners flag the interface of the PAN where Global Protect portal/gateway are hosted as it allows these deprecated versions.

Re: Disable SSLv3/TLSv1

pulukas — Thu, 14 Aug 2014 21:37:34 GMT

I am pretty sure the answer is still no, you can't remove these options. You can see a similar discussion earlier here.

SSL decryption, which version of SSL is used ?

But the best avenue for information on this type of issue will be your PA sales team. They can get you the roadmap for the feature and add you to any pending feature request.

Re: Disable SSLv3/TLSv1

SDorsey — Thu, 14 Aug 2014 23:51:05 GMT

Thanks for the link. Though I don't particularly answer the question. The OP was a question similar to mine but all the answers relate to patching the version of OpenSSL.

I will contact me SE to see if I can get anywhere.