4.2 Set Security TLS Version Maximum

Information

This feature sets the maximum required protocol version.
Setting TLS 1.2 as the maximum authorized protocol version mitigates the risk of using an insecure connection.

Solution

Perform the following procedure:

* Open the mozilla.cfg file in the installation directory with a text editor

* Add the following lines to mozilla.cfg:

lockPref("security.tls.version.max", 3)

See Also

https://workbench.cisecurity.org/files/1158

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-13

Plugin: Unix

Control ID: b9e9c5581399dcb97fedf99b6fc627824dcc55b9679a9ff08328e372faaa8422