topic Re: Forcing TLSv1.2 on outbound connections through Check Point SGW in Firewall and Security Management

Forcing TLSv1.2 on outbound connections through Check Point SGW

0x41cipher — Thu, 18 Jan 2024 10:23:22 GMT

Requirement is to enable TLSv1.2 from a client to server. This can be done locally on the host PC too but I would like to if we can enable to force TLSv1.2 on outbound connections made to a specific server via the SGWs.

Is HTTPS Inspection blade needed for this?

Thank you.

Re: Forcing TLSv1.2 on outbound connections through Check Point SGW

PhoneBoy — Fri, 19 Jan 2024 01:34:10 GMT

Believe you can do it through App Control and/or IPS.

Re: Forcing TLSv1.2 on outbound connections through Check Point SGW

SomAustrianCity — Fri, 19 Jan 2024 13:10:50 GMT

Hi, IPS has these protections:
Transport Layer Security (TLS) Version 1.0
Transport Layer Security (TLS) Version 1.1
Transport Layer Security (TLS) Version 1.2
Just put 1.0 and 1.1 into prevent mode and all attempty to use these versions will be blocked.

In my tests, these protections worked pretty well, no matter if i also used https inspection or not.

Re: Forcing TLSv1.2 on outbound connections through Check Point SGW

0x41cipher — Wed, 24 Jan 2024 05:19:58 GMT

I'll try it out.

Thanks.

Re: Forcing TLSv1.2 on outbound connections through Check Point SGW

0x41cipher — Wed, 24 Jan 2024 05:20:54 GMT

Alright. I'll try it out

Thanks.