protocol-version
Syntax
protocol-version (all | all-secure | tls12 | tls13);
Hierarchy Level
[edit services ssl termination profile profile-name] [edit services ssl initiation profile profile-name] [edit services ssl proxy profile profile-name]
Description
Specify the accepted SSL protocol version.
You can specify the SSL/TLS protocol version the SRX Series Firewall uses to negotiate in SSL connections.
Options
-
all—Accept all versions of TLS. This is enabled by default. -
all-secure—Accepts only secure TLS versions (TLS 1.2 and TLS 1.3). -
TLS version 1.2—Accept TLS version 1.2. This enhanced version of TLS provides improved flexibility for negotiation of cryptographic algorithms. -
TLS version 1.3—Accept TLS version 1.3. This enhanced version of TLS provides improved security and better performance.Note: Starting in Junos OS Release 26.2R1, TLS 1.0 and TLS 1.1 protocol versions are deprecated for SSL proxy—rather than immediately removed—to provide backward compatibility and a chance to bring your configuration into compliance with the new configuration.
Required Privilege Level
services—To view this statement in the configuration.
services-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 12.1X44-D10.
The tls11 and tls12 options are introduced in
15.1X49-D30.
The tls 13 option is introduced in Junos OS Release 21.2R1.
The all-secure options is introduced in Junos OS Release 26.2R1.