Detections
Analytics

2.1.8 Disable static keys for TLS

Information

Disable support for static keys on TLS sessions terminating on the FortiGate

Prevent TLS sessions terminating on the FortiGate from using static SSL keys

Solution

CLI:

config system global
set ssl-static-key-ciphers disable

end

See Also

https://workbench.cisecurity.org/benchmarks/24708

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|12.4

Plugin: FortiGate

Control ID: 0b616e9f8d11d75703177ecec7b264c842e0919f0a26d3b85548699caaf7353a