PBE Zix: TLS Protocol version 1.0 and 1.1 support retirement

book

Article ID: 171443

calendar_today

Updated On:

Products

Email Security.cloud Email Encryption.cloud

Issue/Introduction

Policy Base Encryption provider, Zix is discontinuing support for TLS 1.0 and TLS 1.1 on the Policy-based encryption portals.

Your browser does not support the Transport-Layer Security (TLS) Protocol that is required to connect to the Test website. You need to ensure that you are using the latest vendor supported, updated version of your web browser software, and ensure that TLS 1.1 and TLS 1.2 are enabled in your browser settings.

Environment

Policy-based encryption Portals (Zix)

Resolution

 

What is TLS?

TLS is a protocol for transmitting data securely across the internet. TLS allows your browser to communicate with secure websites over an encrypted connection, preventing outsiders from viewing any data transmitted between you and the website. When you are browsing over a secure TLS connection, your browser displays a security indicator next to the website address.

What is changing?

To ensure the integrity of your encrypted connection, we are removing support for TLS 1.0 and 1.1 protocol from the Zix’s Policy Based Encryption web portal.  We are replacing this older protocol with TLS 1.2, which is considered modern and secure.

When is this happening?

The change will begin on June 3rd, 2018 at 02:00 UTC and will be completed by 02:30 UTC.

How will customers be impacted?

After we disable support for TLS 1.0 and 1.1, external users will be unable to access the Zixs Policy Based Encryption web portal if their browsers do not support TLS 1.2 or higher.

How can customer avoid a service disruption?

Symantec advises updating your preferred browsers to the latest version which supports TLS 1.2. Modern TLS is supported and enabled by the following browsers:

  • Internet Explorer: Version 11 and newer
  • Google Chrome: Version 30 and newer
  • Firefox Mozilla: Version 27 and newer
  • Safari: Version 7 and newer
  • Chrome for Android (Android 4.0 Kitkat and newer)
  • Android OS Browser (Android 5.0 Lollipop and newer)
  • Mobile Safari

For a complete list of Web browser TLS support on all platforms, see Wikipedia: TLS Web browsers matrix.

What if I cannot upgrade my internet browser?

As of January 12th, 2016, Microsoft has ended support for older versions of Internet Explorer (IE 10 and older) For more information, see https://www.microsoft.com/en-us/WindowsForBusiness/End-of-IE-support.

To enable TLS 1.2 protocols on web browsers, see the list below.

Microsoft Internet Explorer

  1. Open Internet Explorer
  2. From the menu bar, click Tools >  Internet Options > Advanced tab
  3. Scroll down to Security category, manually check the option box for Use TLS 1.2
  4. Click OK
  5. Close your browser and restart Internet Explorer
     

Google Chrome

  1. Open Google Chrome
  2. Click Alt F and select Settings
  3. Scroll down and select Show advanced settings...
  4. Scroll down to the Network section and click on Change proxy settings...
  5. Select the Advanced tab
  6. Scroll down to Security category, manually check the option box for Use TLS 1.2
  7. Click OK
  8. Close your browser and restart Google Chrome
     

Mozilla Firefox

  1. Open Firefox
  2. In the address bar, type about:config and press Enter
  3. In the Search field, enter TLS. Find and double-click the entry for security.tls.version.max
  4. Set the integer value to 3 to force protocol of TLS 1.2
  5. Click OK
  6. Close your browser and restart Mozilla Firefox
     

Apple Safari

  • There are no options for enabling SSL protocols. If you are using Safari version 7 or greater, TLS 1.2 is automatically enabled.