Whatever your TLS settings were in your previous deployment are preserved. See Enforce TLS 1.2.Īlternatively, you can do nothing. (Recommended.) Enable TLS 1.2 enforcement to increase the security of your deployment. Only 10.0 and higher Deep Security Agents, Relays, or Virtual Appliances See Enable early TLS (1.0).Īn upgrade to Deep Security Manager 11.1 or higher This is the best option to increase the security of your deployment.Īlternatively, you can enable early TLS 1.0 to ensure backward compatibility with older components. (Recommended.) Upgrade all of your components to 10.0 or higher versions which support TLS 1.2. Pre-10.0 Deep Security Agents, Relays, or Virtual Appliances Only 10.0 and higher Deep Security Agents, Relays, and Virtual Appliancesīy default, TLS 1.2 is used between all components and enforced on the manager and relays. If you are doing.Ī new installation of Deep Security Manager 11.1 or higher

Use of strong cipher suites may cause compatibility issues. If you want to enable TLS 1.2 with only strong, A+-rated, cipher suites, see instead Enable TLS 1.2 strong cipher suites. Review the table below to determine whether you need to take action. In Deep Security Manager 11.1 and higher, TLS 1.2 is enforced by default for new installations.

Test tls 1.2 powershell