Protection against the SSL / TLS vulnerabilities caused by outdated ciphers/protocols

ToniKautto — Wed, 23 Feb 2022 08:11:21 GMT

Qlik Sense Enterprise on Windows and QlikView inherit the available protocols, cipher suites, key exchanges, and other security hardenings which are enabled on the Windows Server operating system.

This means that protection against known vulnerabilities caused by outdated ciphers/protocols can be mitigated by hardening the Windows Server OS.

Example of know cipher protocol vulnerabilities;

SWEET 32
Lucky 13

Note, Windows Server restart is required for a full effect of security hardening, which also includes if they are pushed to the server through Group Policy.

It is important to test and verify that all the software running on the server is still fully functional after completing gardening. For this reason, it is highly recommended to apply hardening in a UAT or staging environment before promoting to production servers.

Environment

QlikView, all versions
Qlik Sense Enterprise on Windows, all versions

article Protection against the SSL / TLS vulnerabilities caused by outdated ciphers/protocols in Official Support Articles

Protection against the SSL / TLS vulnerabilities caused by outdated ciphers/protocols

Environment

Related Content