How to disable SSL Version 2 and 3 on Polycom HDX 7000/8000 and Enable TLS 1.1 or higher instead

[Adriano]

Hello guys,

Does anyone know how to disable SSL 2.0 / 3.0 on HDX 7000/8000 and Enable TLS 1.1 or higher instead? 

Tks

[mschulze]

Hi @Adriano,

Which software version is installed on your HDX? HDX 3.0.0 onwards, support for EAP-TLS was added to the HDX systems.

It is not possible to force 1 specific protocol. The Radius server asks the endpoint for the credentials in a preferred method (e.g., EAP-MD5, EAP-PEAPv0 etc…). The HDX will respond using the protocol that is negotiated between itself and the switch/ Radius server.

[Adriano]

Hi,

I have polycom HDX 8000 and 7000, here is the versions:

HDX 8000 - realease 3.1.1.3 -36019

HDX 8000 - realease 3.1.5-5568

HDX 7000 -  realease 3.1.5-5568

Is there a way to minimize that? I mean, we have a security company that help us to increase our security network level and they found this vulnerability on those polycom devices. (SSL Version 2 and 3 Protocol Detection).

Tks again for your reply.

[SteffenBaierUK · Accepted solution]

Hello @Adriano,

welcome to the Polycom Community.

The Polycom Security Center => here <= lists various security information regarding the HDX so you must be on the very latest 3.1.12 to be protected.

• Omni Botnet
• Remote Code

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

[Adriano]

Hi Steffen,

tks a lot for your reply, I will do that, just a question, to upgrade my HDX endpoints we need just go to Software Update and get the latest version right? sorry for this question because normally I used to upgrade just group series, never did with HDX if you could send me the steps will be very great.

Tks again.