Netgear config page causing security warning in Chrome

[train_wreck]

So the Chrome web browser has started displaying the following security error when logging into my Netgear FVS318Gv2 and my FVS336Gv3:

Both routers are running the latest firmware and have been factory reset.

This is a great reason to update the firmware to allow SHA-256/384/512 certs..............

[willieaames]

I always ignore those errors, thanks for heads up.

[allwires]

Netgear customers using the Netgear products listed by the original poster will see this Security Protocol error using Firefox, and Internet Explorer also, due to the obsolete protocol being deployed by Netgear. Netgear engineering needs to develop a User Interface that will connect to modern day browsers without error.

[train_wreck]

---

@allwires wrote:
Netgear customers using the Netgear products listed by the original poster will see this Security Protocol error using Firefox, and Internet Explorer also, due to the obsolete protocol being deployed by Netgear. Netgear engineering needs to develop a User Interface that will connect to modern day browsers without error.

---

Yes, both Firefox and Chrome both plan to drop support completely for SHA-1 certificate sites this year. This needs to be addressed. Along with supporting SHA2 and using more modern encryption protocols (GCM, etc.) in the web GUI, this support also needs to be extended to the VPN certificates. One of the reasons we are unable to use the FVS336Gv3 device in our organization is because the lack of SHA2 certificates in the VPN causes us to fail PCI DSS compliance.

EDIT also, I don't use the "SSL VPN" feature of the device (only IPsec), but I imagine that this same security problem would extend to that as well...... since to even enable SSL VPN you must enable remote management......

@DaneA@JohnRo@Danthem

[JohnRo]

Hi train_wreck, 

I will forward this to engineering and see if they can give some insights. 

Thanks,