Disabling use of SSLv2 v3

Post Reply
masxtr58
Member
Posts: 1
Joined: 21 Sep 2019 12:33

Disabling use of SSLv2 v3

Post by masxtr58 »

New to the 6850 and having trouble figuring out how to disable use of SSLv2 and SSLv3. Tried setting Force SLL = off.
Running 6.4.6.125 R01 and reading through the CLI Reference. Anyone have experience on this?
devnull
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 976
Joined: 07 Sep 2010 10:16
Location: Germany

Re: Disabling use of SSLv2 v3

Post by devnull »

The Switch is EoL, so it will be hard to find a good solution.
There has bee a software upgrade to 6.4.4 (are you sure you run a 6.4.6 on a 6850 (non E)?
PR 199440
Build: 6.4.4.721.R01
Summary: Vulnerability in SSLv3 (POODLE / CVE -2014- 3566)
Explanation: Disable SSLv3 to mitigate POODLE attack


Same for 6.4.6 (for 6850E)
PR 199440
Build: 6.4.6.216.R01
Summary: Vulnerability in SSLv3 (POODLE / CVE--2014--3566)
Explanation: Disable SSLv3 to mitigate POODLE attack

So best guess is update to latest maintenance release. Ask your distributor or get it from BuisnessPartner Web
Post Reply

Return to “OmniSwitch 6850 / 6850E”