Disable non-secure protocols
Milestone recommends that you use only the necessary protocols, and only the latest versions. For example, implement the latest version of the Transport Layer Security (TLS, currently 1.2) and disable all other cipher suites and obsolete versions of SSL/TLS protocols. This requires configuration of Windows and other system components, and the proper use of digital certificates and keys.
The same recommendation is given for the management server. For more information, see Disable non-secure protocols.
Learn more
The following control(s) provide additional guidance:
- NIST 800-53 AC-17 Remote Access (Disable Unused Protocols)
- NIST 800-53 CM-6 Configuration Settings
- NIST 800-53 CM-7 Least Functionality
Was this article helpful?
Thanks for your feedback!