- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
Re: is disabling SSL2 + 3 possible on GS752TPv2
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
is disabling SSL2 + 3 possible on GS752TPv2
Hi all,
Is it possible to disable SSL2 and 3 on GS752TPv2??We have a Nessus vulnerability scan highlighting that this switch is using unsecure SSL version.
Thx
Ronnie
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: is disabling SSL2 + 3 possible on GS752TPv2
True, and asked several times recently. As log as no https connection is established using SSL2 or 3 (decent browsers won't use it), there is no risk for exposing data. So no rush...
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: is disabling SSL2 + 3 possible on GS752TPv2
True that clients would try highest protocol and crypto first but i guess someone wanting to exploit ssl2 and 3 vulnerability would find a way to force that protocol.
But i take it is not possible?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: is disabling SSL2 + 3 possible on GS752TPv2
Sure one could force the protocol to be used on the client side, then e.g. login, while capturing the data transferred - what require again physical access to the data path. So how real is that in your environment? Do you access the switch using https in plain connection mode (off a VPN) over the wild Internet or an uncontrolled connection?
Look, I don't deny these obsolete stuff must be removed (not just disabled)... @YeZ please, what is the status for updating al the maintained switches supporting https?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: is disabling SSL2 + 3 possible on GS752TPv2
We dont access this off network. we only access this from the local site or via the VPLS network.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: is disabling SSL2 + 3 possible on GS752TPv2
So you have the answer for the scan or audit result - it's not green (Netgear has to change this....), but it's acceptable until remediation is available.