How to Disable TLS 1.0 and TLS 1.1 in GS1900-24HP?

Oriental

We conducted a pentest exercise recently and found the switch (GS1900-24HP) is vulnerable as it still uses weak cipher security. We tried login in to the switch using web GUI to see if we can disable the weak cipher but could not find it.

Kindly provide a guide for us to disable the weak cipher in the switch.

Thank you.

Zyxel_Melen

Hi @Oriental,

Please upgrade the firmware to the latest firmware version. You may find the download link below:

https://community.zyxel.com/en/discussion/16281/switch-gs1900-series-v2-70-patch-5-firmware-release

The latest firmware version has disabled the TLS v1.0 & v1.1. For more information, please reference the private message.

Zyxel_Melen

Hi @Oriental,

Could you share some information with me to clarify this problem?

1. The firmware version.
2. The device hardware version is V1 or V2. (Please check if the device's front panel has reset and restore buttons.)
3. The penetration testing tool you used.
4. The entire test results about the TLS 1.0 and TLS 1.1 part.

Thanks in advance.

Zyxel_Melen

Hi @Oriental,

Please upgrade the firmware to the latest firmware version. You may find the download link below:

https://community.zyxel.com/en/discussion/16281/switch-gs1900-series-v2-70-patch-5-firmware-release

The latest firmware version has disabled the TLS v1.0 & v1.1. For more information, please reference the private message.