Known issue to: FortiOS 5.2.x (can also apply to higher versions). But 5.4.x and later has already disabled weaker ciphers DES, RC4 and SSLv3, so Firewalls running on later version are less-prone to vulnerabilities. Recommendations/Mitigations: What does strong encryption do? Enabling the use of strong encryption will only allow strong ciphers such as: AES … Continue reading Fortigate 5.2 Vulnerability: SSH/SSL – Weak Encryptions
Month: August 2018
Firewall Audit Security Checklist
Found this checklist that is handy in performing securoty reviews for any firewalls. Make sure to compliment this with your firewall vendor's best-practice recommendation document in assessing your firewalls. Firewall-Audit-Checklist-WEB
