Disable Camelia Cipher on the firewall

[Warren_T]

Hello,

In the internal VA scan it is showing that the Camelia cipher is enabled on the firewall.Though we have checked from cipher_util command and observed that it is not showing in either enabled or disabled cipher list.

Let me know how we can disabled the cipher or any SK related to this cipher?

[G_W_Albrecht]

This is very, very strange - i never saw a Camelia cipher at all, and in multi_portal_cipher_priority.conf  or ssl_inspection_cipher_priority.conf (https://support.checkpoint.com/results/sk/sk126613) it can not be found on my R82 GW. 

You could try to add these to the  ":forbidden" section in the .conf files that contains the ciphers the Security Gateway will not accept, but that was for R80.10 and R80.20...

I would try a scan using a different product or ask CP in a SR#.

[_Val_]

This is most probably a scanner false-positive. AFAIK, Camelia ciphers are not used by any of our products.