REMOVE WEAK CIPHER FROM TLS1.2

[siddu099]

Hi Team,

I need to remove Weak cipher from checkpoint GW

current used TLS1.2 kindly let me know how to do

Thnaks

Siddu

[Vincent_Bacher]

Hi,
bit more details would be helpful.
thanks

[AkosBakos · Accepted solution]

Hi!

If you want to change the ciphers, user cipher_util tool.

https://support.checkpoint.com/results/sk/sk126613

Akos

[Vincent_Bacher · Accepted solution]

And after modification, multiportal should be restarted.
I would do that completely, not only 

mpclient stop SecurePlatform
mpclient start SecurePlatform

i prefer to do

mpclient stopall
cpwd_admin start -name MPDAEMON -path "$CPDIR/bin/mpdaemon" -command "mpdaemon $CPDIR/log/mpdaemon.elg $CPDIR/conf/mpdaemon.conf"

Everyone can choose the option that suits them best at their own discretion.

[the_rock]

Just do what @AkosBakos suggested, thats the best way.

[Vincent_Bacher]

Just added the statement to restart the portal because I didn’t see it in the SK nor in Ákos’ post.

[the_rock]

Fair enough.