Disabling weak cipher suites in Sophos Mobile Control
Edit Sophos Mobile Control\proxy\config.xml
Remove any 128bit cipher from the list that ends with SHA
eg.
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA
References: https://community.sophos.com/kb/en-us/121427
Advertisements
See also: https://warlord0blog.wordpress.com/2017/01/20/ssl-64-bit-block-size-cipher-suites-supported-sweet32/
LikeLike
0 Pingbacks