Regarding the issue of ZD1200 TLS SSL

[lanwei]

My model is ZD1200
I have upgraded to version 10.5.1.0 duild 282
Have the following issues been resolved in this version
Question 1 "Disable FTP plaintext authentication"
Question 2: Disable SSLv2, SSLv3, and TLS 1.0. Enable TLS 1.2 "
Question 3 "Disable any weak KBC algorithm in TLS configuration"
What command should I use to check that these issues have been fixed?
Alternatively, you can provide me with an official explanation that these issues have been fixed since 10.5.1.0.

[ms264556]

That command is for disabling deprecated ciphers. Forcing clients to use insecure ciphers makes no sense, which is why I assume the command doesn't allow it.

I gave you an nmap command which you can use to prove that TLS 1.2 is the only available cipher.

[lanwei]

thanks

 Joining my AC IP is 192.168.1.1, and I am executing it on AC's CLI
Can nmap - script ssl-enum-ciphers - p 443 192.168.1.1 obtain the following information?
PORT STATE SERVICE
443/tcp open https
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A
| TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A
| TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A
| TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A
| TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A
| TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
| compressors:
| NULL
| cipher preference: server
| warnings:
| Forward Secrecy not supported by any cipher
|_ least strength: A

thanks