web-manager security version

Function

The web-manager security version command configures the SSL protocols supported by the FW.

The undo web-manager security version command restores the default setting.

Format

web-manager security version { { tlsv1 | tlsv1.1 | tlsv1.2 } ^* | all }

undo web-manager security version

Parameters

Parameter	Description	Value
tlsv1	Indicates that TLS1.0 is supported.	-
tlsv1.1	Indicates that TLS1.1 is supported.	-
tlsv1.2	Indicates that TLS1.2 is supported.	-
all	Indicates that TLS1.0, TLS1.1, and TLS1.2 are all supported.	-

Views

System view

Default Level

3: Management level

Usage Guidelines

By default, the FW supports theTLS1.2 protocols.

TLS1.0 and TLS1.1 have security risks. TLS1.2 and higher versions are recommended.

The SSL protocols supported by the FW (server) and the client must be the same. Otherwise, SSL negotiation fails.

After you specify the new SSL protocol, new connections will use the new protocol for negotiation, but the existing connections still use the old protocol.

Example

# Configure the SSL protocol supported by the server to TLS1.2.

<sysname> system-view
[sysname] web-manager security version tlsv1.2