Which TLS Version is prefarable ?

dp8 · March 6

1. Meaning of "Enforce TLS 1.1 and above".

2. how do I know what TLS version my FW is using?

3. Which Version should I use, or what is the recommendation?

4. The audit shows insecurity on my firewall is using TLS 1.1, is there anything wrong?

Firewall - TZ-500

Firmware - 6.5.4.7-83n

BWC · March 6

@dp8 I'am connecting to a Gen6 device with TLS 1.2, it might be related to some changes in the Firmware, you should upgrade to 6.5.4.13.

TLS 1.1 is deprecated, you can check with your browser what is getting negotiated.

There is an option to disable TLS 1.1 (recommended).

--Michael@BWC

dp8 · March 7

Thank you @BWC for the reply,

It would be more appreciable if you could answer all the Questions so I can understand its needs, and accordingly I can choose.

dp8 · March 7

Anybody, please??

Answers