policymgr interface ＜port-pair-name＞ ssl-intercept outbound min-version

Specifies the minimum TLS version required for outbound SSL connections on the network port pair.

Note
TLS version 1.2 is the default version.

For details about how to configure the advanced SSL settings for SSL interception, see the "Configuring SSL Interception" chapter of the Network Security User Guide.

Syntax

policymgr interface <port-pair-name> ssl-intercept outbound min-version {TLSv1.0 | TLSv1.1 | TLSv1.2 | TLSv1.3}

Parameters

<term>

<port-pair-name>

</term>Designation that is configured on the appliance interface.<term>

TLSv1.0

</term>TLS version 1.0<term>

TLSv1.1

</term>TLS version 1.1<term>

TLSv1.2

</term>TLS version 1.2 (default)<term>

TLSv1.3

</term>TLS version 1.3

Example

The following example sets the minimum version to TLS version 1.1 for outbound SSL interception connections.

hostname (config) # policymgr interface A ssl-intercept outbound min-version TLSv1.1

The following example sets the minimum version to TLS version 1.0 for outbound SSL interception connections.

hostname (config) # policymgr interface A ssl-intercept outbound min-version TLSv1.0

The following example sets the minimum version to TLS version 1.2 for outbound SSL interception connections.

hostname (config) # policymgr interface A ssl-intercept outbound min-version TLSv1.2

User Role

Administrator or Operator

Command Mode

Configuration

Supported Appliances

This command is supported on the following appliances running the specified releases or later:

Network Security: Release 8.2. The policymgr interface ssl-intercept outbound min-version command was changed to the policymgr ssl-intercept config outbound min-version command in Release 8.2.1.