RE: GoAnywhere ciphers

Rob,

Another one of HelpSystems products.
Ask to be escalated to development.

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rob Berendt
Sent: Monday, April 16, 2018 9:34 AM
To: midrange-l@xxxxxxxxxxxx
Subject: GoAnywhere ciphers

I've upgraded GoAnywhere. Now I fail audits because of their ciphers. I opened up a ticket with them basically asking if they can translate their proprietary names into the standards.

My audit says I have to dump
TLSv1 WITH DES/3DES
EXP-DES-CBC-SHA
DES-CBC-SHA
EXP-EDH-RSA-DES-CBC-SHA
EDH-RSA-DES-CBC-SHA
EXP-ADH-DES-CBC-SHA
ADH-DES-CBC-SHA

TLSv1.1 WITH DES/3DES
DES-CBC-SHA
EDH-RSA-DES-CBC-SHA
ADH-DES-CBC-SHA

So, please explain to me which of your naming convention matches up with these Selected aes128-cbc 3des-cbc blowfish-cbc aes192-cbc aes256-cbc

And, should I use any of these or not?
Available
aes128-ctr
aes192-ctr
aes256-ctr

They have no idea what they are doing and my last communication to them was to ask for a list of suggested replacement products. They keep replying back that they will continue to use their proprietary naming convention and it is my responsibility to translate that into what the industry standards are.


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: http://amzn.to/2dEadiD