With the release of the POODLE vulnerability, Fortinet have released a great article on howto disable SSLv3 on all the Fortinet devices that are affected.
The list goes on to include:
The list goes on to include:
- FortiGate
- FortiMail
- FortiAnalyzer
- FortiManager
- FortiAuthenticator
- FortiCache
- FortiWeb
- FortiDDOS
- FortiADC-D
- FortiClient
- FortiVoice-Enterprise
- FortiRecorder
- FortiDB
- FortiSwitchOS
- FortiSwitch ATCA
Fortunately disabling SSLv3 is very simple on all devices, with some just requiring an upgrade.
I won't go into detail on howto disable SSLv3 on every box as it's covered in the article linked above. I just wanted to go through on how you can test to ensure that SSLv3 has been disabled once you've made the configuration change.
