Need response on some VAPT points

karthikeyanB — Thu, 04 Jul 2019 06:46:32 GMT

There are some VAPT points of one of our customer which is attached with the email.

My response on these vulnerability point are as follow:-

1) SSL/TLS Server supports TLSv1.0 :-

We can enable TLSv1.2 in SSL/TLS profile under Device -SSL/TLS profile and use these profile wherever required.

2) Birthday attacks against TLS ciphers with 64bit block size vulnerability (Sweet32) :-

We can enhance block size of cipher and generate certificate for firewall access.

3) SSL Certificate Expired :-

We can renew certificate with vaild start and end date.

4) SSL Certificate - Self-Signed Certificate:-

Trusted third party certificate can be installed for this.

5) SSL Certificate - Improper Usage Vulnerability:-

6) SSL Certificate - Signature Verification Failed Vulnerability:-

Trusted third party certificate can be installed for this.

7) HTTP Security Header Not Detected:- Need your response on this.

😎 Deprecated SSH Cryptographic Settings:-

we can enable strong cipher for ssh access of firewall i.e ctr,gcm.

Please check and share your response on this.

Regards

Karthikeyan

Re: Need response on some VAPT points

OtakarKlier — Fri, 05 Jul 2019 17:01:04 GMT

Hello,

Not sure what the question is, but the points are correct from what I can tell.

Regards,