Detections
Analytics

1.9 SSL Strong Algorithm - d) renegotiate

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

There is a security risk to the ssl lower versions of the equipment. The device can be configured to support higher versions and algorithms only to reduce the connection risk of the ROSNG series products.

Solution

1. SSL must bound PKI profile, the bounded PKI profile needs to import a legal and valid CA certificate
 2. TLS(SSL) version is recommended to be greater than TLS v1.2, at least not less than TLS v1.1.
 3. TLS algorithm does not contain insecure algorithms, which include: CBC, SHA1, MD5
 4. Disable renegotiate

See Also

https://support.zte.com.cn/support/doccenter/DocumentProductHandBookDetail.aspx?sid=102&id=30768582&type=docfeedback

Item Details

Audit Name: Tenable ZTE ROSNG

Plugin: ZTE_ROSNG

Control ID: 61549d5b0c2569d9f02453a269ab64c27bacf5cf9e568e966abc2c78c4b4fe14