• Allow version: SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
• Cipher suite list: custom

• Allow version: SSLv3, TLSv1.0, TLSv1.1, and TLSv1.2
• Cipher suite list: ECDHE-ECDSA-AES256-GCM-SHA384, ECDHE-ECDSA-AES256-SHA384, ECDHE-ECDSA-AES256-SHA, ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA256,ECDHE-ECDSA-AES128-SHA,ECDHE-ECDSA-RC4-SHA,ECDHE-ECDSA-DES-CBC3-SHA,

• Allow version: SSLv3
• Cipher suite list: ECDHE-ECDSA-AES256-SHA, ECDHE-ECDSA-AES128-SHA,ECDHE-ECDSA-RC4-SHA,ECDHE-ECDSA-DES-CBC3-SHA,

• Allow version: TLSv1.2
• Cipher suite list: ECDHE-ECDSA-AES256-GCM-SHA384, ECDHE-ECDSA-AES256-SHA384, ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA256,

• Allow version: SSLv3, TLSv1.0, TLSv1.1, and TLSv1.2
• Cipher suite list: eNull

Recommended for Microsoft Direct Access servers where the application data is already encrypted and no more encryption is needed.

• Allow version TLSv1.2
• Cipher suite list: ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 AES256-GCM-SHA384 AES256-SHA256,

• Allow version SSLv3
• Cipher suite list: DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA256 AES128-SHA ECDHE-RSA-RC4-SHA RC4-MD5 ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA EDH-RSA-DES-CBC-SHA DES-CBC-SHA

• Allow version: TLSv1.0, TLSv1.1, and TLSv1.2
• Cipher suite list: ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA256 AES128-SHA RC4-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA

Enable/disable SSL for the connection between the FortiADC and the real server.

Enable/disable use of user-specified cipher suites. When enabled, you must select a Customized SSL Cipher. See below.

If the customize cipher flag is enabled, specify a colon-separated, ordered list of cipher suites.

An empty string is allowed. If empty, the default cipher suite list is used.

The names you enter are validated against the form of the cipher suite short names published on the OpenSSL website:

https://www.openssl.org/docs/manprimary/apps/ciphers.html

Ciphers are listed from strongest to weakest:

• ECDHE-ECDSA-AES256-GCM-SHA384
• ECDHE-ECDSA-AES256-SHA384

• ECDHE-ECDSA-CAMELLIA256-SHA384

• *ECDHE-ECDSA-AES256-SHA
• ECDHE-ECDSA-AES128-GCM-SHA256
• *ECDHE-ECDSA-AES128-SHA256

• ECDHE-ECDSA-CAMELLIA128-SHA256

• *ECDHE-ECDSA-AES128-SHA
• ECDHE-ECDSA-DES-CBC3-SHA
• ECDHE-ECDSA-RC4-SHA
• ECDHE-RSA-AES256-GCM-SHA384
• ECDHE-RSA-AES256-SHA384

• ECDHE-RSA-CAMELLIA256-SHA384

• *ECDHE-RSA-AES256-SHA
• DHE-RSA-AES256-GCM-SHA384
• *DHE-RSA-AES256-SHA256

• DHE-RSA-CAMELLIA256-SHA256

• *DHE-RSA-AES256-SHA

• DHE-RSA-CAMELLIA256-SHA

• AES256-GCM-SHA384
• *AES256-SHA256
• *AES256-SHA
• ECDHE-RSA-AES128-GCM-SHA256
• *ECDHE-RSA-AES128-SHA256

• ECDHE-RSA-CAMELLIA128-SHA256

• *ECDHE-RSA-AES128-SHA
• DHE-RSA-AES128-GCM-SHA256
• *DHE-RSA-AES128-SHA256

• DHE-RSA-CAMELLIA128-SHA256

• *DHE-RSA-AES128-SHA
• AES128-GCM-SHA256
• *AES128-SHA256
• *AES128-SHA
• ECDHE-RSA-RC4-SHA
• RC4-SHA
• RC4-MD5
• ECDHE-RSA-DES-CBC3-SHA
• EDH-RSA-DES-CBC3-SHA
• DES-CBC3-SHA
• EDH-RSA-DES-CBC-SHA
• DES-CBC-SHA
• eNULL

*These ciphers are fully supported by hardware SSL (in 400F, 1200F, 2200F, 4200F and 5000F).

Note: We recommend retaining the default list. If necessary, you can deselect the SSL ciphers that you do not want to support.

TLSv1.3 ciphers are listed as following:

• TLS_AES_256_GCM_SHA384
• TLS_AES_128_GCM_SHA256
• TLS_CHACHA20_POLY1305_SHA256
• TLS_AES_128_CCM_SHA256
• TLS_AES_128_CCM_8_SHA256

Note: This option only available if the TLSv1.3 is checked.

You have the following options:

• SSLv3
• TLSv1.0
• TLSv1.1
• TLSv1.2
• TLSv1.3

Note:

• Please make sure that the SSL version is continuous. If not, an error message should be returned.

• RFC 7919 Comply cannot support SSLv3 and TLS 1.3. If RFC 7919 Comply is enabled and SSLv3 or TLSv1.3 is selected in Allowed SSL Versions, an error message will display.

This option controls how FortiADC responds to mid-stream SSL reconnection requests either initiated by real servers or forced by FortiADC.

Note:

• This option is enabled by default.
• When disabled, you must select an option for Renegotiation-Deny-Action.

Specify the interval from the initial connect time that FortiADC renegotiates an SSL session. The unit of measurement can be second (default), minute, or hour, e.g., 100s, 20m, or 1h.

Note:

• The default is 0, which disables the function.
• If a custom value is set, FortiADC will renegotiate the SSL session accordingly. For example, if you set the renegotiate period to 3600s (or 3600, 60m, or 1h), FortiADC will renegotiate the SSL session at least once an hour.

Specify the amount (in MB) of application data that must have been transmitted over the secure connection before FortiADC initiates the renegotiation of an SSL session.

Note: The default is 0, which disables the function.

Select one of the following options:

• Request—FortiADC requests secure renegotiation of SSL connections.
• Require—FortiADC requires secure renegotiation of SSL connections. In this mode, FortiADC allows initial SSL handshakes from real servers, but terminates renegotiation from real servers that do not support secure renegotiation.
• Require Strict—FortiADC requires strict secure renegotiation of SSL connections. In this mode, FortiADC denies initial SSL handshakes from real servers that do not support secure renegotiation.

This option becomes available when Renegotiation is disabled on the server side. In that case, you must select an action that FortiADC will take when denying an SSL renegotiation request:

• Ignore (default)—Ignores SSL renegotiation requests.
• Terminate— Terminates SSL connections.

Enable/disable parameters to comply with RFC 7919.

Note: RFC 7919 Comply cannot support SSLv3 and TLS 1.3. If RFC 7919 Comply is enabled and SSLv3 or TLSv1.3 is selected in Allowed SSL Versions, an error message will display.