Disable CBC mode ssl cipher on Check Point Management Server(port 19009)

csupporteam — Thu, 04 May 2023 06:05:13 GMT

I encountered weak CBC mode ssl ciphers on my checkpoint firewall R81.10 which running security scan.

I managed to resolve the CBC mode ssl ciphers on port 443 of the firewall using the following solution: https://support.checkpoint.com/results/sk/sk147272

However, I am unable to find solutions to disable the CBC mode ssl ciphers for port 19009 which is the Checkpoint Management Server(CPM).

Can anyone help me out? Really appreciate any help I can get.

Re: Disable CBC mode ssl cipher on Check Point Management Server(port 19009)

PhoneBoy — Thu, 04 May 2023 19:14:38 GMT

I don't believe it is possible to disable or otherwise change the TLS settings used for internal communication (e.g. SIC, CPM).
The TAC should be able to confirm this: https://help.checkpoint.com
In which case, you're looking at an RFE with your local Check Point office.

topic Disable CBC mode ssl cipher on Check Point Management Server(port 19009) in Firewall and Security Management

Disable CBC mode ssl cipher on Check Point Management Server(port 19009)

Re: Disable CBC mode ssl cipher on Check Point Management Server(port 19009)