Can we trace TLS versions ?

[ChinthuJ]

Can we trace TLS versions used by clients if we bypass the SSL Scanner content inspection ruleset ? If not possible any other options to identify the TLS versions used by the clients ?

[mkutrieba]

Hello @ChinthuJ,

I think this is only possible when using SSL scanner and using these properties:

When bypassing SSL scanner, these properties are empty and nothing is logged therefore.

[ChinthuJ]

Hello Marcel , 

Many thanks . The same parameter has been  added in Access logs  (log handler)

The CSR report is showing  the entries . But for some entries it's showing '-' .

Does that mean  proxy is not able to get that TLS information from the clients OR due to some applications which are bypassed the SSL scanner ruleset ?

[mkutrieba · Accepted solution]

Yes this must be the reason. When we skip SSL scanner, MWG is just "bypassing" it after the CONNECT cycle. So we do not go deeper into it and do not retrieve this information and therefore the properties value stays empty.