← Back to Symantec Edge SWG NDM Security Technical Implementation Guide

V-279249

CAT I (High)

The Edge SWG must be configured to use tlsv1.2 or greater.

Rule ID

SV-279249r1170513_rule

STIG

Symantec Edge SWG NDM Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000197

Discussion

Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Network devices can accomplish this by making direct function calls to encryption modules or by leveraging operating system encryption capabilities.

Check Content

1. Log in to the Edge SWG SSH CLI.
2. Enter "enable" and "configure terminal".
3. Enter "management-services".
4. Enter "edit https-console".
5. Enter "view".

If the "SSL Protocol version" does not equal both "tlsv1.2" and "tlsv1.3", this is a finding.

Fix Text

1. Log in to the Edge SWG SSH CLI.
2. Enter "enable" and "configure terminal".
3. Enter "management-services".
4. Enter "edit https-console".
5. Enter "attribute ssl-versions tlsv1.2 tlsv1.3".