Details

This feature sets the maximum required protocol version.

Setting TLS 1.2 as the maximum authorized protocol version mitigates the risk of using an insecure connection.

Solution

Perform the following procedure:

* Open the mozilla.cfg file in the installation directory with a text editor

* Add the following lines to mozilla.cfg:

lockPref(“security.tls.version.max”, 3)

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1158

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Windows.

References

• 800-53|SC-13

Source

• Tenable.com/audits