topic Disable TLS 1.0 and TLS 1.1 from Checkpoint R77.30 in General Topics

Disable TLS 1.0 and TLS 1.1 from Checkpoint R77.30

Emanzalo — Tue, 20 Jul 2021 12:43:18 GMT

Hello,
I would need to know how can i disable TSL 1.0 and 1.1 from a Checkpoint R77.30 machine, used as system DR management.

Thanks

Re: Disable TLS 1.0 and TLS 1.1 from Checkpoint R77.30

PhoneBoy — Tue, 20 Jul 2021 15:58:45 GMT

In what precise contexts are you concerned about it?
Also keep in mind R77.30 has been End of Support for almost two years at this point and you should really upgrade to a supported release.

Re: Disable TLS 1.0 and TLS 1.1 from Checkpoint R77.30

the_rock — Tue, 20 Jul 2021 19:12:36 GMT

Below might help:

https://community.checkpoint.com/t5/General-Topics/Disable-TLS-1-0/td-p/70338

Re: Disable TLS 1.0 and TLS 1.1 from Checkpoint R77.30

_Val_ — Wed, 21 Jul 2021 06:43:24 GMT

Those are for R80.x and up, not for R77.30, I am afraid...

Re: Disable TLS 1.0 and TLS 1.1 from Checkpoint R77.30

Emanzalo — Wed, 21 Jul 2021 07:12:08 GMT

the system consists of two clustered members and a separate one used as dr, both 77.30. The customer asked me to disable the tls on dr one after a scan. I don't understand why I don't have the same problem for the cluster. Unfortunately I cannot update the system right now.

Re: Disable TLS 1.0 and TLS 1.1 from Checkpoint R77.30

Emanzalo — Wed, 21 Jul 2021 07:13:14 GMT

think you are right, this is a solution for R80.x...

Re: Disable TLS 1.0 and TLS 1.1 from Checkpoint R77.30

_Val_ — Wed, 21 Jul 2021 07:50:33 GMT

Your issue is, R77.30 is out of support. If you extended support for this version on your end, and are still able to open relevant TAC cases for the environment, please do so.

If not, the best cause would be to upgrade and then follow the solution mentioned above.

The reason is, there is a delicate procedure you will have to do, and you need a very close expert guidance for it.

Re: Disable TLS 1.0 and TLS 1.1 from Checkpoint R77.30

the_rock — Wed, 21 Jul 2021 11:16:56 GMT

Yes, you guys are absolutely right. Val is correct though...considering R77.30 is out of support, not sure you might be able to get TAC help with this at all : (