topic Disable Camelia Cipher on the firewall in General Topics

Disable Camelia Cipher on the firewall

Warren_T — Tue, 15 Jul 2025 06:11:09 GMT

Hello,

In the internal VA scan it is showing that the Camelia cipher is enabled on the firewall.Though we have checked from cipher_util command and observed that it is not showing in either enabled or disabled cipher list.

Let me know how we can disabled the cipher or any SK related to this cipher?

Re: Disable Camelia Cipher on the firewall

G_W_Albrecht — Tue, 15 Jul 2025 09:09:10 GMT

This is very, very strange - i never saw a Camelia cipher at all, and in multi_portal_cipher_priority.conf or ssl_inspection_cipher_priority.conf (https://support.checkpoint.com/results/sk/sk126613) it can not be found on my R82 GW.

You could try to add these to the ":forbidden" section in the .conf files that contains the ciphers the Security Gateway will not accept, but that was for R80.10 and R80.20...

I would try a scan using a different product or ask CP in a SR#.

Re: Disable Camelia Cipher on the firewall

_Val_ — Tue, 15 Jul 2025 10:24:49 GMT

This is most probably a scanner false-positive. AFAIK, Camelia ciphers are not used by any of our products.