Use the CLI commands in this procedure to configure the minimum TLS version that is used to establish a connection to accept emails or securely send emails over a TLS connection on the Email Security - Server appliance.
Note
You can configure the minimum TLS version only using the CLI.
Prerequisites
An established connection between the Email Security - Server appliance and the Internet.
You are logged in to the Email Security - Server appliance CLI as an Admin or Operator.
Go to CLI configuration mode.
hostname > enable hostname # configure terminal
Specify the minimum version of the TLS protocol.
To set the TLS minimum version to SSLv3 or higher, enter:
hostname (config) # email-analysis tls min-version ssl3
To set the TLS minimum version to TLSv1 or higher, enter:
hostname (config) # email-analysis tls min-version tls1
Note
The default is TLSv1.2.
To set the TLS minimum version to TLSv1.1 or higher, enter:
hostname (config) # email-analysis tls min-version tls1.1
To set the TLS minimum version to TLSv1.2 or higher, enter:
hostname (config) # email-analysis tls min-version tls1.2
Verify the minimum version of the TLS protocol.
hostname (config) # show email-analysis
Email-Analysis:
enabled: yes
mode: monitor
interface: pether3
TLS receive mode: none
TLS default deliv. mode: none
MTA certificate name: system-self-signed
Password-protected objs: yes
cipher list: compatible
minimum protocol version: tls1
Controlled-live-mode enabled: no
URL dynamic analysis enabled: yes
.
.
.
The "minimum protocol version" line displays the TLS protocol version.
Save your changes.
hostname (config) # write memory