TLS and Cipher suites settings

[wow-66]

Hi,

After i apply a template for disabling weak TLS and cipher suites, found that the epo is not running properly. I would like to know what TLS and cipher suites required for mcafee epo? Attached is the screenshot after applied TLS and ciphers settings

[YashT · Accepted solution]

Hello @wow-66 ,

For TLS and Cipher, I would recommend below two articles that will help you.

ePolicy Orchestrator cannot make outbound connections to SQL, LDAP, or other servers where TLS 1.0 is disabled

Technical Articles ID:   KB90222

Transport Layer Security and cipher suite requirements for ePO 5.10.x

Technical Articles ID:   KB91296

[wow-66]

Thanks yasht for your suggestion i have did as per KB91296 and kb90222 but to no avail. It appears that i have to use the best practice template from crypto to resolve the issue. Im afraid that i might break something in the process

[cdinet · Accepted solution]

We have also found that running iiscrypto and choosing best practices typically resolves those issues.  However, you can still tweak that per your security requirements, such as disabling tls 1.0.  The kb's that YashT gave you are also good.  Make sure those are enabled.

[wow-66]

Thanks cdinet. Your suggestions for using the best practice template from crypto helps.

[cdinet]

Glad to assist!