TLS Logging

[Sanjay_S]

Hi All,

We need to understand how we can capture logs on Checkpoint to see which application is using the TLS1.0 version.

For now we got the link which asked me to enable the IPS signature in detect mode to capture it.

https://community.checkpoint.com/t5/Threat-Prevention/How-to-prevent-TLS1-0-traffic-passing-through-...

However i need to understand if this requires https inspections is required to get the logs for this signature at all? Or just enabling the signature with the detect mode should be fine? Please suggest.

Regards,

Sanjay S

[PhoneBoy]

As we can determine the version without HTTPS Inspection, it should be sufficient to enable the relevant IPS protection.