topic Sweet32 Vulnerability Removal in R80.40 in General Topics

Sweet32 Vulnerability Removal in R80.40

LostBoY — Thu, 29 Jul 2021 19:02:25 GMT

I am looking to remediate CVE-2016-2183 (SWEET 32) from my R80.40 Gateway Cluster and R80.40 Mgmt Server.

I understand from the following sk that Checkpoint products are not vulnerable to SWEET32

However..if i do want to disable weak ciphers ..the above link points to following sk

but this sk does not list R80.40 OS.. does this apply to R80.40 or there are any other steps involved to remove weak ciphers from R80.40

mcatanzaro — Thu, 29 Jul 2021 19:18:19 GMT

Check out the cipher configuration tool found in this SK:

LostBoY — Fri, 30 Jul 2021 07:23:24 GMT

Thanks for the reply.. but how to determine which ciphers i need from cipher_util ? there are many listed is enabled

the_rock — Fri, 30 Jul 2021 14:05:34 GMT

Are you trying to disable certain ciphers just for web UI?