TLS1.3 - R81 - Enable support for TLS_FALLBACK_SCSV on Checkpoint devices

[checkpointer]

Hello all,

We understand that TLS_FALLBACK_SCSV must be enabled on both the client and server sides.

So, if the client supports it, but the server doesn’t, the latter will disregard the signal and attempt the connection. What is the best way to handle this on Checkpoint gateways and other checkpoint devices?

Thanks 

[Chris_Atkinson]

We have an IPS protection that could be helpful CPAI-2016-1127.

But by all means feel free to elaborate and provide additional context if this isn't what you are looking for...