topic Re: Can I disable TLS 1.0 on NAC? in ExtremeWireless (General)

Can I disable TLS 1.0 on NAC?

StephanH — Sat, 29 Sep 2018 03:36:00 GMT

Hello,

is there a possibility to disable TLS 1.0 on NAC (maybe via Appliance Properties)?

This is a demand of some security officers.

The goal here is that the clients are not offered TLS 1.0 during the connection negotiation.

Best regards
Stephan

Re: Can I disable TLS 1.0 on NAC?

Keene__Scott — Tue, 02 Oct 2018 20:41:00 GMT

Hello,

We are checking with Engineering on this.

Thank you.

-Scott Keene
NMS/NAC Support
Extreme GTAC

Re: Can I disable TLS 1.0 on NAC?

OscarK — Tue, 29 Oct 2019 16:50:51 GMT

To answer this question, TLS 1.0 is disabled in NAC version 8.2 or higher.

Re: Can I disable TLS 1.0 on NAC?

Michael_Brady — Fri, 29 May 2020 03:51:50 GMT

I’m running 8.4.3.24 and I just noticed that our internal vulnerability scanner still flagged our NAC appliance as supporting TLS 1.0 and 1.1. I have the same requirements from security officers as mentioned above and was wondering if there was a way to confirm (prove) that it disabled.

Re: Can I disable TLS 1.0 on NAC?

OscarK — Fri, 29 May 2020 14:03:05 GMT

Hi Michael,

disabling can be done with an engine property, it is mentioned in below article.

https://gtacknowledge.extremenetworks.com/articles/Q_A/000043144

In my lab I can see TLS 1.0 is still supported on 8.4.3.24

Re: Can I disable TLS 1.0 on NAC?

Michael_Brady — Fri, 29 May 2020 18:51:06 GMT

Hmm… Doesn’t look like it is working for me. I can’t save after trying to add the value.

Re: Can I disable TLS 1.0 on NAC?

Michael_Brady — Fri, 29 May 2020 18:52:24 GMT

I take it back, don’t know what happened the first time around but this worked the second time I tried it.
We’ll rescan and see if anything changes.

Thanks,
Mike