How to Disable TLS 1.0 and TLS 1.1 in GS1900-24HP?

Options
Oriental
Oriental Posts: 1 image  Freshman Member
in Switch

We conducted a pentest exercise recently and found the switch (GS1900-24HP) is vulnerable as it still uses weak cipher security. We tried login in to the switch using web GUI to see if we can disable the weak cipher but could not find it.

Kindly provide a guide for us to disable the weak cipher in the switch.

Thank you.

Accepted Solution

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 5,088 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Options

    Hi @Oriental,

    Could you share some information with me to clarify this problem?

    1. The firmware version.
    2. The device hardware version is V1 or V2. (Please check if the device's front panel has reset and restore buttons.)
    3. The penetration testing tool you used.
    4. The entire test results about the TLS 1.0 and TLS 1.1 part.

    Thanks in advance.

    Zyxel Melen


  • Zyxel_Melen
    Zyxel_Melen Posts: 5,088 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    edited October 2023 Answer ✓
    Options

    Hi @Oriental,

    Please upgrade the firmware to the latest firmware version. You may find the download link below:

    https://community.zyxel.com/en/discussion/16281/switch-gs1900-series-v2-70-patch-5-firmware-release

    The latest firmware version has disabled the TLS v1.0 & v1.1. For more information, please reference the private message.

    Zyxel Melen


Categories

Switch Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）