CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it yet again - That's right, the 3rd edition is here!
You can read his announcement post here.
It's a massive upgrade focusing on current versions, and well worth checking out. -E

 

Results 1 to 3 of 3

Thread: Deprecated SHA1 problem on a 680 & Chrome. Can I fix this?

  1. #1
    Join Date
    2007-10-12
    Posts
    141
    Rep Power
    13

    Default Deprecated SHA1 problem on a 680 & Chrome. Can I fix this?

    Seems like all my new devices use certificates now. I've had to educate myself on how these things work. I'm a part time ID manager but I manage to get it working eventually. So when I set up my 680 I got the dreaded X in Chrome. After installing the certificate I still get an X with the following information:

    Click image for larger version. 

Name:	cp600.jpg 
Views:	79 
Size:	194.7 KB 
ID:	1020

    It's basically saying that the server (680) is using an older cipher protocol SHA1? and should be using SHA2?

    Anyway. Is there anything I can do to fix this error? I just hate seeing things that are not as they should.

    Thanks,

    Roveer

  2. #2
    Join Date
    2007-06-04
    Posts
    3,314
    Rep Power
    17

    Default Re: Deprecated SHA1 problem on a 680 & Chrome. Can I fix this?

    Update the software on the 680, latest versions support SHA-2/SHA-256 Certificates.

  3. #3
    Join Date
    2007-10-12
    Posts
    141
    Rep Power
    13

    Default Re: Deprecated SHA1 problem on a 680 & Chrome. Can I fix this?

    Before I configured the device I made sure that the firmware was upgraded to the latest version which is showing as R75.20.71 (983004120). I'm guessing the device it is connecting to an older UTM-1 might not support the newer SHA2. I'm in the process of connecting the 680 to an 1100 (which will also have the latest firmware), so I'll see if that fixes it.

    Roveer

Similar Threads

  1. Chrome 42 -- Java no longer allowed as a plugin -- NPAPI -- Mobile Access
    By aacrobinso in forum Mobile Access Blade (Formerly Connectra)
    Replies: 4
    Last Post: 2015-05-28, 16:00
  2. DLP doesnt work when using chrome browser and gmail upload attachment
    By dummy in forum Data Loss Prevention Blade (DLP))
    Replies: 1
    Last Post: 2014-04-16, 11:53
  3. Unable to block HTTPS traffic though google Chrome
    By Strider_99 in forum Firewall Blade
    Replies: 0
    Last Post: 2013-08-14, 18:38
  4. Replies: 1
    Last Post: 2012-02-24, 11:06
  5. S/Key Support is deprecated in NG AI (R54) and above
    By roadrunner in forum Authentication
    Replies: 0
    Last Post: 2005-08-13, 16:08

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •