Aruba Instant & Cloud Wi-Fi

Reply
Occasional Contributor II
Posts: 20
Registered: ‎09-05-2012

Disable SSLv3 in Aruba Instant

Hello!

Since Aruba Instant was also affected by the latest SSL vurnability, I was trying to find out how to force it to only accept TLS as in Aruba OS.

I was, however, unable to find any information regarding the command to use.

 

Does anyone know?

Guru Elite
Posts: 8,458
Registered: ‎09-08-2010

Re: Disable SSLv3 in Aruba Instant

It cannot currently be disabled in Instant.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor II
Posts: 20
Registered: ‎09-05-2012

Re: Disable SSLv3 in Aruba Instant

Thank you for the information!

Aruba
Posts: 1,368
Registered: ‎12-12-2011

Re: Disable SSLv3 in Aruba Instant

More info on this:

 

All modern browsers support TLSv1 at a minimum, and most also support TLSv1.1 and TLSv1.2.

We recommend disabling SSLv3 support in the browser.

As long as one side of the connection refuses to support SSLv3, the attack will be unsuccessful.

 

 

If you have a controller, executing the following command from the controller CLI will enable only TLSv1:

(config) #web-server ssl-protocol tlsv1

 

For our official response, see here:

 

http://www.arubanetworks.com/support/alerts/aid-10142014.txt

 

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
Occasional Contributor II
Posts: 20
Registered: ‎09-05-2012

Re: Disable SSLv3 in Aruba Instant

Hello!

Yes, I´ve disabled it in my browsers a long time ago. But for those unfamiliar with the issues, I wanted to have some guarentees.

 

Thanks for the information but I´ve already seen it and are familier with the proceedure to disable support for SSL v3 in ArubaOS.

 

Thanks!

/Mikael

Search Airheads
Showing results for 
Search instead for 
Did you mean: