does anyone know if the Webfilter is vulnerable when doing HTTPS scan? We use UTM 9.211 and the OpenSSL library is 1.0.1j (vulnerable). (e.g. UTM version 9.308 uses OpenSSL 1.0.1k and so I guess the web proxy is secure, except if it's using another SSL library).
The question is: when doing HTTPS scan, does the UTM a) pass through the cipher list from the browser or b) does it send its own list (containing export grade ciphers)?
In case of b), the SSL connection between server and UTM could be vulnerable even if the browser is updated and has a secure connection to the UTM.
does anyone know if the Webfilter is vulnerable when doing HTTPS scan? We use UTM 9.211 and the OpenSSL library is 1.0.1j (vulnerable). (e.g. UTM version 9.308 uses OpenSSL 1.0.1k and so I guess the web proxy is secure, except if it's using another SSL library).
Hi Jens, fwiw, according to the Nagios URL above, my 9.211 WAF is not vulnerable on port 443 (SSL WAF).
The question is: when doing HTTPS scan, does the UTM a) pass through the cipher list from the browser or b) does it send its own list (containing export grade ciphers)?
b. I have the certificates installed on the WAF, so it's doing it's own SSL.
In case of b), the SSL connection between server and UTM could be vulnerable even if the browser is updated and has a secure connection to the UTM.
does anyone know if the Webfilter is vulnerable when doing HTTPS scan? We use UTM 9.211 and the OpenSSL library is 1.0.1j (vulnerable). (e.g. UTM version 9.308 uses OpenSSL 1.0.1k and so I guess the web proxy is secure, except if it's using another SSL library).
Hi Jens, fwiw, according to the Nagios URL above, my 9.211 WAF is not vulnerable on port 443 (SSL WAF).
The question is: when doing HTTPS scan, does the UTM a) pass through the cipher list from the browser or b) does it send its own list (containing export grade ciphers)?
b. I have the certificates installed on the WAF, so it's doing it's own SSL.
In case of b), the SSL connection between server and UTM could be vulnerable even if the browser is updated and has a secure connection to the UTM.
