Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Viewing all articles
Browse latest Browse all 2577

Re: ssl_error_no_cypher_overlap when trying acess to SSG5

$
0
0

Hello,

 

It seems that FW's default self signed certificate uses RC4 cipher which is not supported by latest browsers.

 

You try following steps to change the cipher and test:

1.) "set ssl encrypt 3des sha-1" on the firewall to change the cipher used to access the device from RC4_MD5 to 3DES_SHA-1

# If the step one does not work then you can try change the self signed certificate on the device with 3DES as the cipher:

 

2. Please follow these steps to generate the certificate:

+ Prior to performing this procedure, you have to delete system self-signedcertificate:
# delete pki object-id system

 

+ Then follow these steps:
+ Define the certificate attributes:

# Objects>certificates>new>fill in the parameters>select key length as 2048 and RSA > generate a self signed certificate

 

+ After the security device generates a key pair,to learn the ID number for the key pair, use the following command:

# get pki x509 list key-pair

 

+ Use this local certficate for managing the device

# Configuration>admin>management>in the certificate drop down select this new certificate and select cipher as des or3 des

 

Please let me know if this works or not.

Regards,
Rishi


Viewing all articles
Browse latest Browse all 2577

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>