topic SSL/TLS proxy in General Topics

SSL/TLS proxy

LCMember1672 — Mon, 30 Jul 2018 15:21:59 GMT

An internal client can only make sslv3 connections while an external server only accepts tls 1.2 so the goal is to create a policy that will allow this, using the PA as an SSL proxy.

Is this possible? I was looking at decryption policies but I'm not sure how to fwd the connection attemt to be tls 1.2 to the external server.

any help would be much appreciated

SW version 6.1.10

Re: SSL/TLS proxy

LCMember1672 — Mon, 30 Jul 2018 17:55:01 GMT

I discussed this with TAC and it seems there is no feasable way to do this

Re: SSL/TLS proxy

BPry — Mon, 30 Jul 2018 21:27:19 GMT

@LCMember1672,

I would agree with TAC, you can't really do that with the PA. That being said .... did they recommend that you upgrade your firewalls? 6.1 goes EOL October 25, 2018, so if you haven't already I would really start planning your migration to a newer release.