topic Re: TLS1.3 - R81 -Disable support for client-initiated renegotiation in Firewall and Security Management

TLS1.3 - R81 -Disable support for client-initiated renegotiation

checkpointer — Sun, 04 Sep 2022 22:09:29 GMT

Hello all,

Re TLS1.3, is it possible to disable support for client-initiated renegotiation on a Checkpoint firewall?

Thanks

Re: TLS1.3 - R81 -Disable support for client-initiated renegotiation

Chris_Atkinson — Mon, 05 Sep 2022 03:45:06 GMT

Please review the below and advise if it is helpful.

https://community.checkpoint.com/t5/General-Topics/Client-Initiated-TLS-Renegotiation-DoS/td-p/112605

Re: TLS1.3 - R81 -Disable support for client-initiated renegotiation

Sanjay_S — Tue, 06 Sep 2022 11:25:31 GMT

Thank you for the link Chris.

So on Checkpoint firewalls we do not have to make any changes for this. We do not have to disable Client initiated Re-negotiation as this is not even considered as vulnerability due to the way Checkpoint works.