Plantronics + Polycom. Now together as Poly Logo

How to disable SSL Version 2 and 3 on Polycom HDX 7000/8000 and Enable TLS 1.1 or higher instead

SOLVED
Adriano
Visitor

How to disable SSL Version 2 and 3 on Polycom HDX 7000/8000 and Enable TLS 1.1 or higher instead

Hello guys,

 

Does anyone know how to disable SSL 2.0 / 3.0 on HDX 7000/8000 and Enable TLS 1.1 or higher instead? 

 

Tks

 

 

Message 1 of 5
1 ACCEPTED SOLUTION

Accepted Solutions
SteffenBaierUK
Polycom Employee & Community Manager

Re: How to disable SSL Version 2 and 3 on Polycom HDX 7000/8000 and Enable TLS 1.1 or higher instead

Hello @Adriano,

welcome to the Polycom Community.

The Polycom Security Center => here <= lists various security information regarding the HDX so you must be on the very latest 3.1.12 to be protected.

 

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. My official "day" Job is 3rd Level support at Poly but I am unable to provide official support via the community.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

View solution in original post

Message 4 of 5
4 REPLIES 4
mschulze
Esteemed Contributor

Re: How to disable SSL Version 2 and 3 on Polycom HDX 7000/8000 and Enable TLS 1.1 or higher instead

Hi @Adriano,

 

Which software version is installed on your HDX? HDX 3.0.0 onwards, support for EAP-TLS was added to the HDX systems.

It is not possible to force 1 specific protocol. The Radius server asks the endpoint for the credentials in a preferred method (e.g., EAP-MD5, EAP-PEAPv0 etc…). The HDX will respond using the protocol that is negotiated between itself and the switch/ Radius server.

Message 2 of 5
Adriano
Visitor

Re: How to disable SSL Version 2 and 3 on Polycom HDX 7000/8000 and Enable TLS 1.1 or higher instead

Hi,

 

I have polycom HDX 8000 and 7000, here is the versions:

 

HDX 8000 - realease 3.1.1.3 -36019

HDX 8000 - realease 3.1.5-5568

HDX 7000 -  realease 3.1.5-5568

 

Is there a way to minimize that? I mean, we have a security company that help us to increase our security network level and they found this vulnerability on those polycom devices. (SSL Version 2 and 3 Protocol Detection).

 

Tks again for your reply.

Message 3 of 5
SteffenBaierUK
Polycom Employee & Community Manager

Re: How to disable SSL Version 2 and 3 on Polycom HDX 7000/8000 and Enable TLS 1.1 or higher instead

Hello @Adriano,

welcome to the Polycom Community.

The Polycom Security Center => here <= lists various security information regarding the HDX so you must be on the very latest 3.1.12 to be protected.

 

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. My official "day" Job is 3rd Level support at Poly but I am unable to provide official support via the community.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

View solution in original post

Message 4 of 5
Adriano
Visitor

Re: How to disable SSL Version 2 and 3 on Polycom HDX 7000/8000 and Enable TLS 1.1 or higher instead

Hi Steffen,

 

tks a lot for your reply, I will do that, just a question, to upgrade my HDX endpoints we need just go to Software Update and get the latest version right? sorry for this question because normally I used to upgrade just group series, never did with HDX if you could send me the steps will be very great.

 

Tks again.

Message 5 of 5