Disabling TLS 1.1 on NX Server/ NX Witness

Answered

Follow

Tony

• July 29, 2022 05:33

Hi,

A vulnerability scan of identified our NX Server accepting TLS 1.1 on port 7001.

How can we disable TLS 1.1 in NX Server?

0

• 

  Wendy Chuang

  • July 29, 2022 07:01
  • Edited

  Hi Tony,

  Please follow the steps to disable TLS1.1 on your server:

  • Windows:
    1. Open the registry and visit the path
    HKEY_LOCAL_MACHINE\SOFTWARE\Network Optix\Network Optix Media Server
    2. Add a string value allowedSslVersions and put the value TLSv1.2
    3. Restart the Nx mediaserver service
    
    
  • Linux:
    1. Go to the path /opt/networkoptix/mediaserver/etc/
    2. Open the mediaserver.conf and add one line allowedSslVersions=tls1_2
    3. Restart the Nx mediaserver service

  Thank you.

  JIRA-VMS-35135

  0

  Comment actions Permalink
• 

  Campbell Steven

  • August 07, 2022 23:00

  Thanks for answering this, I'd been meaning to raise this as well. Have applied on a few systems here and all is well.

  0

  Comment actions Permalink
• 

  Tony

  • August 07, 2022 23:14

  Yep can confirm have applied this fix and all is working successfully.

   

  0

  Comment actions Permalink
• 

  Wendy Chuang

  • August 08, 2022 05:55

  Hi Campbell Steven and Tony,

  We've submitted the internal task to evaluate the default supported version of TLS (disable TLS v1.1 and support TLS v1.3). If there's any change made, it will be listed in the release note in the future version.
  At the moment, please use the above method to turn it off.

  Thanks for your feedback. 

   

  0

  Comment actions Permalink

Please sign in to leave a comment.