topic Re: Disabling RC4 encryption and enabling TLS for web access Zone director in Wireless Questions and Best Practices

Disabling RC4 encryption and enabling TLS for web access Zone director

tamilselvam_p — Wed, 10 Jun 2015 08:40:31 GMT

Hi Experts ,

During security audit it is reported that ZD is using RC4, CBC. How to disable them and enable TLS 1.2 and CTR encryption suites. the version is 9.5.2.0

Re: Disabling RC4 encryption and enabling TLS for web access Zone director

john_d — Wed, 10 Jun 2015 17:02:36 GMT

You can do slightly better by upgrading your ZoneDirector to a more recent firmware. On 9.10, I'm seeing it connecting with TLS 1.2 and AES-128-GCM. Still considered obsolete these days, but way better than RC4-CBC and probably will pass your audits.

Re: Disabling RC4 encryption and enabling TLS for web access Zone director

tamilselvam_p — Thu, 11 Jun 2015 04:20:21 GMT

Thanks Mr.John , The telnet server in this ZD is using version less than Dropbear SSH 2013.59. How Can I upgrade the same?

Re: Disabling RC4 encryption and enabling TLS for web access Zone director

john_d — Thu, 11 Jun 2015 05:35:30 GMT

Yep. On 9.10:

debug1: Remote protocol version 2.0, remote software version dropbear_2014.63