https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/85188#M9352 <P><SPAN><SPAN>TAC has shared below sk.</SPAN></SPAN></P><P><SPAN><SPAN>Kindly check sk132712, if this is relevant? (For Disabling TLS1.0 and TLS1.1)</SPAN><BR /></SPAN></P> Thu, 14 May 2020 08:37:25 GMT Prime 2020-05-14T08:37:25Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/83869#M9343 <P>We not using Checkpoint remote VPN in current setup but still we want to fix the TLS related below mentioned vulnerability.</P><P>TLS Version 1.0 and 1.1 Protocol Detection Vulnerbility.</P><P>We have VSX deployment and running r80.10 gaia os.</P><P>Also what will be the impact if we disable 1.1 and enable 1.2.</P> Fri, 01 May 2020 20:58:18 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/83869#M9343 Prime 2020-05-01T20:58:18Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/83892#M9344 <P>I assume the context here is&nbsp;<SPAN>sk154532 what other blades are enabled in the environment?</SPAN></P> Sat, 02 May 2020 07:21:51 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/83892#M9344 Chris_Atkinson 2020-05-02T07:21:51Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/83948#M9345 <P>Can you share me the sk154532 link?</P> Sun, 03 May 2020 16:02:27 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/83948#M9345 Prime 2020-05-03T16:02:27Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/83959#M9346 <P>&nbsp;</P> <P><A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk154532&amp;partition=Advanced&amp;product=Security" target="_blank">https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk154532&amp;partition=Advanced&amp;product=Security</A></P> <P>Note access to some SK articles may depend on you support/partner/certification level.</P> Sun, 03 May 2020 23:02:28 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/83959#M9346 Chris_Atkinson 2020-05-03T23:02:28Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/83960#M9347 Do I need to install policy after making the changes? Sun, 03 May 2020 23:44:50 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/83960#M9347 Prime 2020-05-03T23:44:50Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/83961#M9348 Yes Mon, 04 May 2020 00:06:56 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/83961#M9348 PhoneBoy 2020-05-04T00:06:56Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/84097#M9349 I have made changes today..waiting for the team to re-scan and check if we still get this vulnerability or not. Mon, 04 May 2020 14:44:19 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/84097#M9349 Prime 2020-05-04T14:44:19Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/84307#M9350 <P>We have received report from VAPT team after rescanning the Checkpoint devices, still this Vulnerability is showing Open in the report.</P> Wed, 06 May 2020 06:31:15 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/84307#M9350 Prime 2020-05-06T06:31:15Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/84407#M9351 Recommend working with the TAC on this. Thu, 07 May 2020 05:03:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/84407#M9351 PhoneBoy 2020-05-07T05:03:17Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/85188#M9352 <P><SPAN><SPAN>TAC has shared below sk.</SPAN></SPAN></P><P><SPAN><SPAN>Kindly check sk132712, if this is relevant? (For Disabling TLS1.0 and TLS1.1)</SPAN><BR /></SPAN></P> Thu, 14 May 2020 08:37:25 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/85188#M9352 Prime 2020-05-14T08:37:25Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/85199#M9353 Relevance probably depends on which ports the scan revealed the lower TLS versions for. Thu, 14 May 2020 10:47:25 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/85199#M9353 Chris_Atkinson 2020-05-14T10:47:25Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/85200#M9354 vapt report says for port 443 Thu, 14 May 2020 11:00:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/85200#M9354 Prime 2020-05-14T11:00:58Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/86792#M9355 <P>We followed <SPAN>the sk147272 on both the cluster member to mitigate TLS and sweet32 vulnerabilities and re-scaned the device now we don't see this in open.</SPAN></P><P><SPAN>Issue resolved </SPAN></P> Sat, 30 May 2020 09:38:16 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/TLS-Version-1-0-and-1-1-Protocol-Detection-Vulnerbility/m-p/86792#M9355 Prime 2020-05-30T09:38:16Z