topic Disable TLS 1.0/1.1 and use TLS 1.2 on SMB 1100 (GAIA OS: 77.20.20) in Spark Firewall (SMB)

Disable TLS 1.0/1.1 and use TLS 1.2 on SMB 1100 (GAIA OS: 77.20.20)

TEST5 — Tue, 06 May 2025 17:34:10 GMT

We have Checkpoint SMB 1100 with GAIA OS version 77.20.20, and we're looking to use TLS 1.2.

I have checked the GUI, but I don’t see any direct option to disable lower TLS versions (TLS 1.0 and 1.1) or useTLS 1.2.

After some research, I found the following link which suggests that TLS 1.2 support was introduced in R77.20.40 for the SMB 1100 appliance.

Can anyone confirm if upgrading to version R77.20.40 0 or R77.20.80 would effectively disable TLS 1.0/1.1 and enforce TLS 1.2 on the platform? Or is there an alternative way to configure this manually without upgrading?

Any insights or recommendations would be greatly appreciated!

Re: Disable TLS 1.0/1.1 and use TLS 1.2 on SMB 1100 (GAIA OS: 77.20.20)

PhoneBoy — Tue, 06 May 2025 21:34:20 GMT

Unfortunately, there is no way to get TLS 1.2 support without upgrading to a release with said support.
Not sure if it completely disables TLS 1.0/1.1 or not.

Re: Disable TLS 1.0/1.1 and use TLS 1.2 on SMB 1100 (GAIA OS: 77.20.20)

G_W_Albrecht — Wed, 07 May 2025 10:02:32 GMT

1100 are absolutely out of support since Jun-2022, and i know of no way to configure R77.20.80 with TLS 1.2 !