A vulnerability scan report has revealed that a user has generated traffic to the website...

The best way to block outdated SSL/TLS versions is to configure the SSL/SSH inspection profile to enforce a minimum SSL/TLS version and disable weak SSL versions.

By setting the minimum allowed SSL version in the HTTPS settings of the SSL/SSH inspection profile, FortiGate will:

● Block any connection using outdated SSL/TLS versions (such as SSLv3, TLS 1.0, or TLS 1.1).

● Enforce secure communication using only strong SSL/TLS versions (such as TLS 1.2 or TLS 1.3).

● Protect users from man-in-the-middle (MITM) and downgrade attacks that exploit weak encryption.