Sophos Firewall

Discussions Disable TLS1_1 in MTA mode

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 7 replies
Subscribers 28 subscribers
Views 951 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Disable TLS1_1 in MTA mode

Francesco Namuri1 over 2 years ago

Hello,

I'd like to disable this version of TLS from my MTA configuration, is it possibile?

I already enable the flag on "Disable legacy TLS protocols"

Thanks in advance for the help.

Francesco

Edited TAGs
[edited by: Erick Jan at 4:56 AM (GMT -8) on 15 Nov 2022]

Top Replies

Vivek Jagad over 2 years ago in reply to Francesco Namuri1 +2 verified

Hey Francesco Namuri1 , I believe there is way around from the shell access. Can you PM me directly ? There is a workaround [NC-77151]

Parents

0 Vivek Jagad over 2 years ago

Hello Francesco Namuri1,

Thank you for reaching out to the community, Under the Email > General settings > SMTP TLS configuration > Disable legacy TLS protocols.
Select to turn off protocols earlier than TLS 1.1. To overcome TLS vulnerabilities, we recommend that you turn off legacy TLS protocols.

community.sophos.com/.../disabling-tls-1-1-within-smtp-tls-configuration

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Francesco Namuri1 over 2 years ago in reply to Vivek Jagad

Hello Vivek Jagad,

thanks for the answer.

I already selected the "Disable legacy TLS protocols" but I'm still able to use the TLS1.1 to connect to MTA services.

Best regards,

Francesco
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 2 years ago in reply to Francesco Namuri1

Hey Francesco Namuri1 what is the firmware currently being used on the appliance?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Francesco Namuri1 over 2 years ago in reply to Vivek Jagad

SFOS 19.0.0 GA-Build317

Best regards,

Francesco
Cancel
Vote Up 0 Vote Down

Cancel
+1 Vivek Jagad over 2 years ago in reply to Francesco Namuri1

Hey Francesco Namuri1, I believe there is way around from the shell access. Can you PM me directly ?
There is a workaround [NC-77151]

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +2 Vote Down

Cancel
0 Cedric Menzi1 over 2 years ago in reply to Vivek Jagad

Hey Vivek Jagad

Can you tell me what the Workaround is? I have the same issue...

Thanks!

Regards, Cedric.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Cedric Menzi1 over 2 years ago in reply to Vivek Jagad

Hey Vivek Jagad

Can you tell me what the Workaround is? I have the same issue...

Thanks!

Regards, Cedric.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Vivek Jagad over 2 years ago in reply to Cedric Menzi1

Hey Cedric Menzi1,

Sure, please PM me directly and I can provide you the workaround !!

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel